elgg vulnerabilities and fixes

Recent CVEs affecting elgg, with upgrade or downgrade steps. 3 tracked.

elgg has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-12-24. Highest priority: CVE-2021-3980 (score 55/100).

• CVE-2021-4072 MEDIUM 5.4 UPGRADE elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2021-3980 HIGH 7.5 UPGRADE elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
• CVE-2021-3964 MEDIUM 5.9 UPGRADE elgg is vulnerable to Authorization Bypass Through User-Controlled Key

FAQ

How do I fix elgg vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is elgg being exploited right now?

None of the tracked elgg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which elgg CVE should I patch first?

CVE-2021-3980 currently ranks highest (55/100): elgg is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor.

RSS feed for elgg · ← Back to latest CVEs