PatchTheCVEmonit vulnerabilities and fixes
Recent CVEs affecting monit, with upgrade or downgrade steps. 5 tracked.
monit has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-07-18. Highest priority: CVE-2019-11393 (score 65/100).
- CVE-2022-26563 HIGH 8.8 UPGRADE An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidge
- CVE-2019-11455 HIGH 8.1 UPGRADE MITIGATE A buffer over-read in Util_urlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated
- CVE-2019-11454 MEDIUM 6.1 UPGRADE MITIGATE Persistent cross-site scripting (XSS) in http/cervlet.c in Tildeslash Monit before 5.25.3 allows a remote unau
- CVE-2019-11393 CRITICAL 9.8 UPGRADE An issue was discovered in /admin/users/update in M/Monit before 3.7.3
- CVE-2016-7067 MEDIUM 6.5 UPGRADE Monit before version 5.20.0 is vulnerable to a cross site request forgery attack
FAQ
How do I fix monit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is monit being exploited right now?
None of the tracked monit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which monit CVE should I patch first?
CVE-2019-11393 currently ranks highest (65/100): An issue was discovered in /admin/users/update in M/Monit before 3.7.3.