PatchTheCVEfinder vulnerabilities and fixes
Recent CVEs affecting finder, with upgrade or downgrade steps. 4 tracked.
finder has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-06-15. Highest priority: CVE-2012-1641 (score 47/100).
- CVE-2015-4363 MEDIUM 5.8 MITIGATE Open redirect vulnerability in the finder_form_goto function in the Finder module for Drupal allows remote att
- CVE-2012-6645 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before
- CVE-2012-1641 MEDIUM 6.0 DOWNGRADE The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-a
- CVE-2012-1561 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x be
FAQ
How do I fix finder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is finder being exploited right now?
None of the tracked finder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which finder CVE should I patch first?
CVE-2012-1641 currently ranks highest (47/100): The finder_import function in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-a.