PatchTheCVEkonawiki vulnerabilities and fixes
Recent CVEs affecting konawiki, with upgrade or downgrade steps. 5 tracked.
konawiki has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-05-20. Highest priority: CVE-2021-20721 (score 58/100).
- CVE-2021-20721 CRITICAL 9.8 UPGRADE KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors
- CVE-2021-20720 CRITICAL 9.8 UPGRADE SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitr
- CVE-2020-5614 MEDIUM 5.3 UPGRADE Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary file
- CVE-2020-5613 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitra
- CVE-2020-5612 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitra
FAQ
How do I fix konawiki vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is konawiki being exploited right now?
None of the tracked konawiki CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which konawiki CVE should I patch first?
CVE-2021-20721 currently ranks highest (58/100): KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.