ignitedcms vulnerabilities and fixes

Recent CVEs affecting ignitedcms, with upgrade or downgrade steps. 3 tracked.

ignitedcms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-08-06. Highest priority: CVE-2020-18694 (score 51/100).

• CVE-2020-18694 HIGH 8.8 DOWNGRADE Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information a
• CVE-2019-13370 HIGH 8.8 UPGRADE index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.
• CVE-2018-15203 MEDIUM 6.5 UPGRADE An issue was discovered in Ignited CMS through 2017-02-19

FAQ

How do I fix ignitedcms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ignitedcms being exploited right now?

None of the tracked ignitedcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ignitedcms CVE should I patch first?

CVE-2020-18694 currently ranks highest (51/100): Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information a.

RSS feed for ignitedcms · ← Back to latest CVEs