PatchTheCVEmwembed vulnerabilities and fixes
Recent CVEs affecting mwembed, with upgrade or downgrade steps. 2 tracked.
mwembed has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-01-09. Highest priority: CVE-2022-4876 (score 23/100).
- CVE-2022-4882 LOW 2.6 UPGRADE A vulnerability was found in kaltura mwEmbed up to 2.91
- CVE-2022-4876 LOW 3.5 UPGRADE A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic
FAQ
How do I fix mwembed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mwembed being exploited right now?
None of the tracked mwembed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mwembed CVE should I patch first?
CVE-2022-4876 currently ranks highest (23/100): A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic.