PatchTheCVEindexhibit vulnerabilities and fixes
Recent CVEs affecting indexhibit, with upgrade or downgrade steps. 6 tracked.
indexhibit has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-08-30. Highest priority: CVE-2020-18121 (score 51/100).
- CVE-2020-18127 MEDIUM 6.5 DOWNGRADE An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files.
- CVE-2020-18126 MEDIUM 5.4 DOWNGRADE Multiple stored cross-site scripting (XSS) vulnerabilities in the Sections module of Indexhibit 2.1.5 allows a
- CVE-2020-18125 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 all
- CVE-2020-18124 MEDIUM 5.7 DOWNGRADE A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset ac
- CVE-2020-18123 MEDIUM 6.5 DOWNGRADE A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete a
- CVE-2020-18121 HIGH 8.8 DOWNGRADE A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to gets
FAQ
How do I fix indexhibit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is indexhibit being exploited right now?
None of the tracked indexhibit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which indexhibit CVE should I patch first?
CVE-2020-18121 currently ranks highest (51/100): A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to gets.