PatchTheCVEefront vulnerabilities and fixes
Recent CVEs affecting efront, with upgrade or downgrade steps. 4 tracked.
efront has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-03-03. Highest priority: CVE-2020-28597 (score 47/100).
- CVE-2020-28597 HIGH 7.5 DOWNGRADE A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21
- CVE-2015-4463 MEDIUM 6.5 UPGRADE The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended
- CVE-2015-4462 MEDIUM 6.5 UPGRADE Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remot
- CVE-2015-4461 MEDIUM 6.5 UPGRADE Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obta
FAQ
How do I fix efront vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is efront being exploited right now?
None of the tracked efront CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which efront CVE should I patch first?
CVE-2020-28597 currently ranks highest (47/100): A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21.