PatchTheCVEarchon vulnerabilities and fixes
Recent CVEs affecting archon, with upgrade or downgrade steps. 2 tracked.
archon has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-07-03. Highest priority: CVE-2017-17911 (score 38/100).
- CVE-2017-17972 MEDIUM 6.1 DOWNGRADE packages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subje
- CVE-2017-17911 MEDIUM 6.1 DOWNGRADE packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact
FAQ
How do I fix archon vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is archon being exploited right now?
None of the tracked archon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which archon CVE should I patch first?
CVE-2017-17911 currently ranks highest (38/100): packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact.