PatchTheCVEinxedu vulnerabilities and fixes
Recent CVEs affecting inxedu, with upgrade or downgrade steps. 3 tracked.
inxedu has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-23. Highest priority: CVE-2024-35570 (score 59/100).
- CVE-2024-35570 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0
- CVE-2024-35080 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the gok4 method of inxedu v2024.4 allows attackers to execute arbitr
- CVE-2024-35079 CRITICAL 9.8 DOWNGRADE An arbitrary file upload vulnerability in the uploadAudio method of inxedu v2024.4 allows attackers to execute
FAQ
How do I fix inxedu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inxedu being exploited right now?
None of the tracked inxedu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inxedu CVE should I patch first?
CVE-2024-35570 currently ranks highest (59/100): An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.