PatchTheCVEext js vulnerabilities and fixes
Recent CVEs affecting ext js, with upgrade or downgrade steps. 2 tracked.
Also searched as: extjs.
ext js has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-01-23. Highest priority: CVE-2007-6758 (score 54/100).
- CVE-2018-8046 MEDIUM 6.1 UPGRADE The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even
- CVE-2007-6758 HIGH 7.5 DOWNGRADE Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0.
FAQ
How do I fix ext js vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ext js being exploited right now?
None of the tracked ext js CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ext js CVE should I patch first?
CVE-2007-6758 currently ranks highest (54/100): Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0..