PatchTheCVEcatfish cms vulnerabilities and fixes
Recent CVEs affecting catfish cms, with upgrade or downgrade steps. 3 tracked.
Also searched as: catfishcms.
catfish cms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-12-15. Highest priority: CVE-2021-45017 (score 45/100).
- CVE-2021-45018 MEDIUM 6.1 UPGRADE Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/inde
- CVE-2021-45017 HIGH 8.8 UPGRADE Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containi
- CVE-2020-23962 MEDIUM 6.1 DOWNGRADE A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scr
FAQ
How do I fix catfish cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is catfish cms being exploited right now?
None of the tracked catfish cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which catfish cms CVE should I patch first?
CVE-2021-45017 currently ranks highest (45/100): Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containi.