PatchTheCVEkoa2-blog vulnerabilities and fixes
Recent CVEs affecting koa2-blog, with upgrade or downgrade steps. 2 tracked.
Also searched as: koa2 blog.
koa2-blog has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-02-01. Highest priority: CVE-2020-21180 (score 62/100).
- CVE-2020-21180 CRITICAL 9.8 DOWNGRADE Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement
- CVE-2020-21179 CRITICAL 9.8 DOWNGRADE Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement
FAQ
How do I fix koa2-blog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is koa2-blog being exploited right now?
None of the tracked koa2-blog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which koa2-blog CVE should I patch first?
CVE-2020-21180 currently ranks highest (62/100): Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement .