PatchTheCVEchatengine vulnerabilities and fixes
Recent CVEs affecting chatengine, with upgrade or downgrade steps. 7 tracked.
chatengine has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-07-06. Highest priority: CVE-2023-30319 (score 53/100).
- CVE-2023-30326 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 C
- CVE-2023-30325 HIGH 7.5 DOWNGRADE SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine
- CVE-2023-30323 HIGH 7.5 DOWNGRADE SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, a
- CVE-2023-30322 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEn
- CVE-2023-30321 CRITICAL 9.0 DOWNGRADE Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6
- CVE-2023-30320 CRITICAL 9.0 DOWNGRADE Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 Ch
- CVE-2023-30319 CRITICAL 9.6 DOWNGRADE Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 Cha
FAQ
How do I fix chatengine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chatengine being exploited right now?
None of the tracked chatengine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chatengine CVE should I patch first?
CVE-2023-30319 currently ranks highest (53/100): Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 Cha.