PatchTheCVEctparental vulnerabilities and fixes
Recent CVEs affecting ctparental, with upgrade or downgrade steps. 3 tracked.
ctparental has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-08-10. Highest priority: CVE-2021-37366 (score 42/100).
- CVE-2021-37367 HIGH 7.8 UPGRADE CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel
- CVE-2021-37366 HIGH 8.8 UPGRADE CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel
- CVE-2021-37365 MEDIUM 6.1 UPGRADE CTparental before 4.45.03 is vulnerable to cross-site scripting (XSS) in the CTparental admin panel
FAQ
How do I fix ctparental vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ctparental being exploited right now?
None of the tracked ctparental CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ctparental CVE should I patch first?
CVE-2021-37366 currently ranks highest (42/100): CTparental before 4.45.03 is vulnerable to cross-site request forgery (CSRF) in the CTparental admin panel.