gwtupload vulnerabilities and fixes

Recent CVEs affecting gwtupload, with upgrade or downgrade steps. 2 tracked.

gwtupload has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-05-18. Highest priority: CVE-2020-13128 (score 55/100).

• CVE-2020-9447 MEDIUM 6.1 DOWNGRADE There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality
• CVE-2020-13128 HIGH 7.5 DOWNGRADE An issue was discovered in Manolo GWTUpload 1.0.3

FAQ

How do I fix gwtupload vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gwtupload being exploited right now?

None of the tracked gwtupload CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gwtupload CVE should I patch first?

CVE-2020-13128 currently ranks highest (55/100): An issue was discovered in Manolo GWTUpload 1.0.3.

← Back to latest CVEs