PatchTheCVEbhima vulnerabilities and fixes
Recent CVEs affecting bhima, with upgrade or downgrade steps. 3 tracked.
bhima has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-04-05. Highest priority: CVE-2023-0967 (score 41/100).
- CVE-2023-0967 MEDIUM 6.5 DOWNGRADE Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of o
- CVE-2023-0959 MEDIUM 6.5 DOWNGRADE Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the applic
- CVE-2023-0944 MEDIUM 4.3 DOWNGRADE Bhima version 1.27.0 allows an authenticated attacker with regular user permissions to update arbitrary user s
FAQ
How do I fix bhima vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bhima being exploited right now?
None of the tracked bhima CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bhima CVE should I patch first?
CVE-2023-0967 currently ranks highest (41/100): Bhima version 1.27.0 allows an attacker authenticated with normal user permissions to view sensitive data of o.