PatchTheCVEgespage vulnerabilities and fixes
Recent CVEs affecting gespage, with upgrade or downgrade steps. 4 tracked.
gespage has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-07-12. Highest priority: CVE-2017-7997 (score 69/100).
- CVE-2021-33807 HIGH 7.5 UPGRADE Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownl
- CVE-2018-9147 MEDIUM 6.1 DOWNGRADE Cross-site scripting (XSS) vulnerabilities in version 7.5.7 of Gespage software allow remote attackers to inje
- CVE-2017-7998 MEDIUM 6.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject a
- CVE-2017-7997 CRITICAL 9.8 UPGRADE Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL
FAQ
How do I fix gespage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gespage being exploited right now?
None of the tracked gespage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gespage CVE should I patch first?
CVE-2017-7997 currently ranks highest (69/100): Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL.