PatchTheCVEcollabtive vulnerabilities and fixes
Recent CVEs affecting collabtive, with upgrade or downgrade steps. 10 tracked.
collabtive has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-01-29. Highest priority: CVE-2015-0258 (score 63/100).
- CVE-2021-3298 MEDIUM 5.4 DOWNGRADE Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the pro
- CVE-2020-13655 MEDIUM 6.1 DOWNGRADE An issue was discovered in Collabtive 3.0 and later
- CVE-2019-8935 MEDIUM 5.4 DOWNGRADE Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
- CVE-2015-0258 HIGH 8.8 UPGRADE MITIGATE Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabti
- CVE-2014-3247 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitra
- CVE-2014-3246 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL comma
- CVE-2013-6872 MEDIUM 6.5 UPGRADE SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated user
- CVE-2013-5027 CRITICAL 9.8 DOWNGRADE Collabtive 1.0 has incorrect access control
- CVE-2010-5285 MEDIUM 6.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hi
- CVE-2010-5284 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbit
FAQ
How do I fix collabtive vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is collabtive being exploited right now?
None of the tracked collabtive CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which collabtive CVE should I patch first?
CVE-2015-0258 currently ranks highest (63/100): Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabti.