PatchTheCVEevasys vulnerabilities and fixes
Recent CVEs affecting evasys, with upgrade or downgrade steps. 3 tracked.
evasys has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-02. Highest priority: CVE-2023-31433 (score 51/100).
- CVE-2023-31435 HIGH 8.1 DOWNGRADE Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and quest
- CVE-2023-31434 MEDIUM 5.4 DOWNGRADE The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct l
- CVE-2023-31433 HIGH 8.8 DOWNGRADE A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenti
FAQ
How do I fix evasys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is evasys being exploited right now?
None of the tracked evasys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which evasys CVE should I patch first?
CVE-2023-31433 currently ranks highest (51/100): A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenti.