PatchTheCVEefront lms vulnerabilities and fixes
Recent CVEs affecting efront lms, with upgrade or downgrade steps. 2 tracked.
Also searched as: efrontlms.
efront lms has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-05. Highest priority: CVE-2019-5069 (score 57/100).
- CVE-2019-5070 MEDIUM 6.5 UPGRADE An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.
- CVE-2019-5069 HIGH 8.8 UPGRADE A code execution vulnerability exists in Epignosis eFront LMS v5.2.12
FAQ
How do I fix efront lms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is efront lms being exploited right now?
None of the tracked efront lms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which efront lms CVE should I patch first?
CVE-2019-5069 currently ranks highest (57/100): A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.