PatchTheCVEgeoportal toolkit vulnerabilities and fixes
Recent CVEs affecting geoportal toolkit, with upgrade or downgrade steps. 2 tracked.
Also searched as: geoportaltoolkit.
geoportal toolkit has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-28. Highest priority: CVE-2024-6449 (score 35/100).
- CVE-2024-6450 MEDIUM 6.1 UPGRADE HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS)
- CVE-2024-6449 MEDIUM 6.5 UPGRADE HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching
FAQ
How do I fix geoportal toolkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is geoportal toolkit being exploited right now?
None of the tracked geoportal toolkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which geoportal toolkit CVE should I patch first?
CVE-2024-6449 currently ranks highest (35/100): HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching.