PatchTheCVEftapi vulnerabilities and fixes
Recent CVEs affecting ftapi, with upgrade or downgrade steps. 2 tracked.
ftapi has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-03-19. Highest priority: CVE-2021-25277 (score 41/100).
- CVE-2021-25278 MEDIUM 4.8 UPGRADE FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box
- CVE-2021-25277 MEDIUM 6.1 UPGRADE FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission co
FAQ
How do I fix ftapi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ftapi being exploited right now?
None of the tracked ftapi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ftapi CVE should I patch first?
CVE-2021-25277 currently ranks highest (41/100): FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission co.