PatchTheCVEmysiteforme vulnerabilities and fixes
Recent CVEs affecting mysiteforme, with upgrade or downgrade steps. 7 tracked.
mysiteforme has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-03-04. Highest priority: CVE-2024-57766 (score 53/100).
- CVE-2025-26136 CRITICAL 9.8 UPGRADE A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
- CVE-2024-57767 HIGH 8.6 UPGRADE MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file
- CVE-2024-57766 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57765 HIGH 7.5 UPGRADE MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at tab
- CVE-2024-57764 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57763 CRITICAL 9.1 UPGRADE MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy
- CVE-2024-57762 HIGH 7.5 UPGRADE MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuratio
FAQ
How do I fix mysiteforme vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mysiteforme being exploited right now?
None of the tracked mysiteforme CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mysiteforme CVE should I patch first?
CVE-2024-57766 currently ranks highest (53/100): MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component sy.