PatchTheCVEmagicpin vulnerabilities and fixes
Recent CVEs affecting magicpin, with upgrade or downgrade steps. 2 tracked.
magicpin has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-06-14. Highest priority: CVE-2022-31447 (score 53/100).
- CVE-2022-31447 HIGH 7.5 DOWNGRADE An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive dat
- CVE-2020-28927 MEDIUM 6.1 DOWNGRADE There is a Stored XSS in Magicpin v2.1 in the User Registration section
FAQ
How do I fix magicpin vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is magicpin being exploited right now?
None of the tracked magicpin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which magicpin CVE should I patch first?
CVE-2022-31447 currently ranks highest (53/100): An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive dat.