PatchTheCVEenhavo vulnerabilities and fixes
Recent CVEs affecting enhavo, with upgrade or downgrade steps. 4 tracked.
enhavo has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-02-22. Highest priority: CVE-2024-25876 (score 36/100).
- CVE-2024-25876 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to exec
- CVE-2024-25875 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to exec
- CVE-2024-25874 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in the New/Edit Article module of Enhavo CMS v0.13.1 allows attacke
- CVE-2024-25873 MEDIUM 5.4 DOWNGRADE Enhavo v0.13.1 was discovered to contain an HTML injection vulnerability in the Author text field under the Bl
FAQ
How do I fix enhavo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is enhavo being exploited right now?
None of the tracked enhavo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which enhavo CVE should I patch first?
CVE-2024-25876 currently ranks highest (36/100): A cross-site scripting (XSS) vulnerability in the Header module of Enhavo CMS v0.13.1 allows attackers to exec.