PatchTheCVEelkarbackup vulnerabilities and fixes
Recent CVEs affecting elkarbackup, with upgrade or downgrade steps. 3 tracked.
elkarbackup has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-11-02. Highest priority: CVE-2020-24925 (score 52/100).
- CVE-2020-35249 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via
- CVE-2020-24925 HIGH 7.5 DOWNGRADE A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3
- CVE-2020-24924 MEDIUM 5.4 DOWNGRADE A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal th
FAQ
How do I fix elkarbackup vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is elkarbackup being exploited right now?
None of the tracked elkarbackup CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which elkarbackup CVE should I patch first?
CVE-2020-24925 currently ranks highest (52/100): A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3.