PatchTheCVEgestioip vulnerabilities and fixes
Recent CVEs affecting gestioip, with upgrade or downgrade steps. 5 tracked.
gestioip has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-01-14. Highest priority: CVE-2024-48760 (score 72/100).
- CVE-2024-50861 MEDIUM 6.1 DOWNGRADE The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS
- CVE-2024-50859 MEDIUM 4.8 DOWNGRADE The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS
- CVE-2024-50858 HIGH 8.8 DOWNGRADE Multiple endpoints in GestioIP v3.5.7 are vulnerable to Cross-Site Request Forgery (CSRF)
- CVE-2024-50857 MEDIUM 4.8 DOWNGRADE The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS)
- CVE-2024-48760 CRITICAL 9.8 DOWNGRADE An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function
FAQ
How do I fix gestioip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gestioip being exploited right now?
None of the tracked gestioip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gestioip CVE should I patch first?
CVE-2024-48760 currently ranks highest (72/100): An issue in GestioIP v3.5.7 allows a remote attacker to execute arbitrary code via the file upload function.