antsword vulnerabilities and fixes

Recent CVEs affecting antsword, with upgrade or downgrade steps. 3 tracked.

antsword has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-10-26. Highest priority: CVE-2020-18766 (score 55/100).

• CVE-2020-25470 MEDIUM 6.1 DOWNGRADE AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion
• CVE-2020-18766 CRITICAL 9.6 DOWNGRADE A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
• CVE-2019-13970 MEDIUM 6.1 UPGRADE In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/

FAQ

How do I fix antsword vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is antsword being exploited right now?

None of the tracked antsword CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which antsword CVE should I patch first?

CVE-2020-18766 currently ranks highest (55/100): A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands..

RSS feed for antsword · ← Back to latest CVEs