PatchTheCVEmonitorix vulnerabilities and fixes
Recent CVEs affecting monitorix, with upgrade or downgrade steps. 4 tracked.
monitorix has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-01-27. Highest priority: CVE-2013-7070 (score 67/100).
- CVE-2021-3325 CRITICAL 9.8 DOWNGRADE MITIGATE Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an in
- CVE-2018-7649 MEDIUM 6.1 UPGRADE Monitorix before 3.10.1 allows XSS via CGI variables.
- CVE-2013-7071 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix befo
- CVE-2013-7070 CRITICAL 9.8 UPGRADE The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute
FAQ
How do I fix monitorix vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is monitorix being exploited right now?
None of the tracked monitorix CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which monitorix CVE should I patch first?
CVE-2013-7070 currently ranks highest (67/100): The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute .