PatchTheCVEfreecad vulnerabilities and fixes
Recent CVEs affecting freecad, with upgrade or downgrade steps. 2 tracked.
freecad has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-01-25. Highest priority: CVE-2021-45845 (score 57/100).
- CVE-2021-45845 HIGH 7.8 DOWNGRADE MITIGATE The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to ex
- CVE-2021-45844 HIGH 7.8 DOWNGRADE MITIGATE Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject O
FAQ
How do I fix freecad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is freecad being exploited right now?
None of the tracked freecad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which freecad CVE should I patch first?
CVE-2021-45845 currently ranks highest (57/100): The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to ex.