PatchTheCVEke questionnaire vulnerabilities and fixes
Recent CVEs affecting ke questionnaire, with upgrade or downgrade steps. 3 tracked.
Also searched as: kequestionnaire.
ke questionnaire has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2014-12-02. Highest priority: CVE-2010-4957 (score 44/100).
- CVE-2014-8874 MEDIUM 5.0 UPGRADE The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer
- CVE-2010-4957 HIGH 7.5 UPGRADE SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows re
- CVE-2010-4956 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TY
FAQ
How do I fix ke questionnaire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ke questionnaire being exploited right now?
None of the tracked ke questionnaire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ke questionnaire CVE should I patch first?
CVE-2010-4957 currently ranks highest (44/100): SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows re.