cache vulnerabilities and fixes

Recent CVEs affecting cache, with upgrade or downgrade steps. 5 tracked.

cache has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-08-08. Highest priority: CVE-2020-36448 (score 55/100).

• CVE-2021-25903 HIGH 7.5 UPGRADE An issue was discovered in the cache crate through 2021-01-01 for Rust
• CVE-2020-36448 HIGH 8.1 UPGRADE An issue was discovered in the cache crate through 2020-11-24 for Rust
• CVE-2018-17152 MEDIUM 6.4 DOWNGRADE Intersystems Cache 2017.2.2.865.0 allows XXE.
• CVE-2018-17151 MEDIUM 5.4 DOWNGRADE Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
• CVE-2018-17150 MEDIUM 6.1 DOWNGRADE Intersystems Cache 2017.2.2.865.0 allows XSS.

FAQ

How do I fix cache vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cache being exploited right now?

None of the tracked cache CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cache CVE should I patch first?

CVE-2020-36448 currently ranks highest (55/100): An issue was discovered in the cache crate through 2020-11-24 for Rust.

RSS feed for cache · ← Back to latest CVEs