articlecms vulnerabilities and fixes

Recent CVEs affecting articlecms, with upgrade or downgrade steps. 4 tracked.

articlecms has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-05-13. Highest priority: CVE-2020-28063 (score 62/100).

• CVE-2020-28063 CRITICAL 9.8 MITIGATE A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
• CVE-2020-20092 CRITICAL 9.8 DOWNGRADE File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Cont
• CVE-2018-19469 MEDIUM 6.1 UPGRADE ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
• CVE-2018-12339 MEDIUM 5.4 UPGRADE ArticleCMS through 2017-02-19 has XSS via an "add an article" action.

FAQ

How do I fix articlecms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is articlecms being exploited right now?

None of the tracked articlecms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which articlecms CVE should I patch first?

CVE-2020-28063 currently ranks highest (62/100): A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell..

RSS feed for articlecms · ← Back to latest CVEs