baijiacms vulnerabilities and fixes

Recent CVEs affecting baijiacms, with upgrade or downgrade steps. 4 tracked.

baijiacms has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-15. Highest priority: CVE-2022-35150 (score 61/100).

• CVE-2022-45942 HIGH 8.8 DOWNGRADE A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.
• CVE-2022-38931 HIGH 8.8 DOWNGRADE A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote att
• CVE-2022-35150 CRITICAL 9.8 DOWNGRADE Baijicms v4 was discovered to contain an arbitrary file upload vulnerability.
• CVE-2021-33396 MEDIUM 6.5 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or

FAQ

How do I fix baijiacms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is baijiacms being exploited right now?

None of the tracked baijiacms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which baijiacms CVE should I patch first?

CVE-2022-35150 currently ranks highest (61/100): Baijicms v4 was discovered to contain an arbitrary file upload vulnerability..

RSS feed for baijiacms · ← Back to latest CVEs