cloud manager vulnerabilities and fixes

Recent CVEs affecting cloud manager, with upgrade or downgrade steps. 5 tracked.

Also searched as: cloudmanager.

cloud manager has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-06-14. Highest priority: CVE-2023-41748 (score 57/100).

• CVE-2024-34012 MEDIUM 4.4 UPGRADE Local privilege escalation due to insecure folder permissions
• CVE-2023-41748 CRITICAL 9.8 UPGRADE Remote command execution due to improper input validation
• CVE-2023-41747 MEDIUM 6.5 UPGRADE Sensitive information disclosure due to unauthenticated path traversal
• CVE-2023-41746 CRITICAL 9.8 UPGRADE Remote command execution due to improper input validation
• CVE-2023-0421 MEDIUM 6.1 UPGRADE The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before out

FAQ

How do I fix cloud manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cloud manager being exploited right now?

None of the tracked cloud manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cloud manager CVE should I patch first?

CVE-2023-41748 currently ranks highest (57/100): Remote command execution due to improper input validation.

RSS feed for cloud manager · ← Back to latest CVEs