PatchTheCVEopen atrium vulnerabilities and fixes
Recent CVEs affecting open atrium, with upgrade or downgrade steps. 3 tracked.
Also searched as: openatrium.
open atrium has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-02-01. Highest priority: CVE-2014-9504 (score 50/100).
- CVE-2014-9504 HIGH 7.5 UPGRADE The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remo
- CVE-2014-9503 MEDIUM 6.5 UPGRADE The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenti
- CVE-2014-9502 HIGH 8.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium modul
FAQ
How do I fix open atrium vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open atrium being exploited right now?
None of the tracked open atrium CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open atrium CVE should I patch first?
CVE-2014-9504 currently ranks highest (50/100): The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remo.