PatchTheCVEgosa vulnerabilities and fixes
Recent CVEs affecting gosa, with upgrade or downgrade steps. 3 tracked.
gosa has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-12-31. Highest priority: CVE-2019-11187 (score 64/100).
- CVE-2019-14466 MEDIUM 6.5 DOWNGRADE MITIGATE The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows
- CVE-2019-11187 CRITICAL 9.8 UPGRADE MITIGATE Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into a
- CVE-2018-1000528 MEDIUM 6.1 MITIGATE MITIGATE GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (X
FAQ
How do I fix gosa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gosa being exploited right now?
None of the tracked gosa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gosa CVE should I patch first?
CVE-2019-11187 currently ranks highest (64/100): Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into a.