PatchTheCVEfaq vulnerabilities and fixes
Recent CVEs affecting faq, with upgrade or downgrade steps. 6 tracked.
faq has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-03-22. Highest priority: CVE-2016-5843 (score 60/100).
- CVE-2021-21438 LOW 3.5 UPGRADE UPGRADE Agents are able to see linked FAQ articles without permissions (defined in FAQ Category)
- CVE-2016-5843 CRITICAL 9.4 DOWNGRADE Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5
- CVE-2013-2637 MEDIUM 6.1 UPGRADE UPGRADE A Cross-Site Scripting (XSS) Vulnerability exists in OTRS ITSM prior to 3.2.4, 3.1.8, and 3.0.7 and FAQ prior
- CVE-2013-2625 MEDIUM 6.5 UPGRADE UPGRADE An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.
- CVE-2012-1646 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1
- CVE-2006-4008 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execu
FAQ
How do I fix faq vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is faq being exploited right now?
None of the tracked faq CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which faq CVE should I patch first?
CVE-2016-5843 currently ranks highest (60/100): Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.