PatchTheCVEcsp mysql user manager vulnerabilities and fixes
Recent CVEs affecting csp mysql user manager, with upgrade or downgrade steps. 1 tracked.
Also searched as: cspmysqlusermanager.
csp mysql user manager has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-05-05. Highest priority: CVE-2018-10757 (score 72/100).
- CVE-2018-10757 CRITICAL 9.8 DOWNGRADE CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username
FAQ
How do I fix csp mysql user manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is csp mysql user manager being exploited right now?
None of the tracked csp mysql user manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which csp mysql user manager CVE should I patch first?
CVE-2018-10757 currently ranks highest (72/100): CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username.