lynda clone vulnerabilities and fixes

Recent CVEs affecting lynda clone, with upgrade or downgrade steps. 3 tracked.

Also searched as: lyndaclone.

lynda clone has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17643 (score 66/100).

• CVE-2017-17904 MEDIUM 5.4 DOWNGRADE FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to use
• CVE-2017-17903 HIGH 8.8 DOWNGRADE FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
• CVE-2017-17643 CRITICAL 9.8 DOWNGRADE FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

FAQ

How do I fix lynda clone vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lynda clone being exploited right now?

None of the tracked lynda clone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lynda clone CVE should I patch first?

CVE-2017-17643 currently ranks highest (66/100): FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/..

RSS feed for lynda clone · ← Back to latest CVEs