PatchTheCVEgoollery vulnerabilities and fixes
Recent CVEs affecting goollery, with upgrade or downgrade steps. 2 tracked.
goollery has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2004-12-31. Highest priority: CVE-2004-2246 (score 42/100).
- CVE-2004-2246 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary
- CVE-2004-2245 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or
FAQ
How do I fix goollery vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is goollery being exploited right now?
None of the tracked goollery CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which goollery CVE should I patch first?
CVE-2004-2246 currently ranks highest (42/100): Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary .