PatchTheCVEmailform vulnerabilities and fixes
Recent CVEs affecting mailform, with upgrade or downgrade steps. 2 tracked.
mailform has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-05-23. Highest priority: CVE-2023-27507 (score 57/100).
- CVE-2023-27507 CRITICAL 9.8 UPGRADE MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability
- CVE-2023-27397 CRITICAL 9.8 UPGRADE Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8
FAQ
How do I fix mailform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mailform being exploited right now?
None of the tracked mailform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mailform CVE should I patch first?
CVE-2023-27507 currently ranks highest (57/100): MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability.