PatchTheCVEautomad vulnerabilities and fixes
Recent CVEs affecting automad, with upgrade or downgrade steps. 5 tracked.
automad has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-07-19. Highest priority: CVE-2024-40400 (score 50/100).
- CVE-2024-40400 HIGH 8.8 UPGRADE An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to exec
- CVE-2023-7038 MEDIUM 4.3 UPGRADE A vulnerability was found in automad up to 1.10.9
- CVE-2023-7037 MEDIUM 6.3 UPGRADE A vulnerability was found in automad up to 1.10.9
- CVE-2023-7036 MEDIUM 4.7 UPGRADE A vulnerability was found in automad up to 1.10.9
- CVE-2023-7035 LOW 2.4 UPGRADE A vulnerability was found in automad up to 1.10.9 and classified as problematic
FAQ
How do I fix automad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is automad being exploited right now?
None of the tracked automad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which automad CVE should I patch first?
CVE-2024-40400 currently ranks highest (50/100): An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to exec.