PatchTheCVEcommunity vulnerabilities and fixes
Recent CVEs affecting community, with upgrade or downgrade steps. 2 tracked.
community has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-12-30. Highest priority: CVE-2020-29477 (score 38/100).
- CVE-2020-29477 MEDIUM 4.8 DOWNGRADE Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field
- CVE-2012-1903 MEDIUM 5.4 DOWNGRADE XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter.
FAQ
How do I fix community vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is community being exploited right now?
None of the tracked community CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which community CVE should I patch first?
CVE-2020-29477 currently ranks highest (38/100): Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field.