PatchTheCVEgoo blog vulnerabilities and fixes
Recent CVEs affecting goo blog, with upgrade or downgrade steps. 2 tracked.
Also searched as: gooblog.
goo blog has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-03-29. Highest priority: CVE-2022-25420 (score 66/100).
- CVE-2022-25420 CRITICAL 9.8 DOWNGRADE NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection
- CVE-2021-20728 MEDIUM 5.3 UPGRADE UPGRADE Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3
FAQ
How do I fix goo blog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is goo blog being exploited right now?
None of the tracked goo blog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which goo blog CVE should I patch first?
CVE-2022-25420 currently ranks highest (66/100): NTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection.