opencats vulnerabilities and fixes

Recent CVEs affecting opencats, with upgrade or downgrade steps. 20 tracked.

opencats has 20 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-04-11. Highest priority: CVE-2022-43019 (score 66/100).

• CVE-2023-27295 MEDIUM 5.4 DOWNGRADE Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests
• CVE-2023-27294 MEDIUM 5.4 DOWNGRADE Improper neutralization of input during web page generation allows an authenticated attacker with access to a
• CVE-2023-27293 MEDIUM 6.1 DOWNGRADE Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malic
• CVE-2023-27292 MEDIUM 5.4 DOWNGRADE An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-suppl
• CVE-2023-26847 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web
• CVE-2023-26846 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web
• CVE-2023-26845 MEDIUM 4.3 DOWNGRADE A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requ
• CVE-2022-48013 MEDIUM 5.4 DOWNGRADE Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /
• CVE-2022-48012 MEDIUM 6.1 DOWNGRADE Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the compone
• CVE-2022-48011 CRITICAL 9.8 DOWNGRADE Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Impo
• CVE-2022-43023 MEDIUM 6.5 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID parameter in the Impo
• CVE-2022-43022 MEDIUM 6.5 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag del
• CVE-2022-43021 MEDIUM 6.5 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage variable.
• CVE-2022-43020 MEDIUM 6.5 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable in the Tag upd
• CVE-2022-43019 CRITICAL 9.8 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager
• CVE-2022-43018 MEDIUM 6.1 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the email p
• CVE-2022-43017 MEDIUM 6.1 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the indexFi
• CVE-2022-43016 MEDIUM 6.1 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callbac
• CVE-2022-43015 MEDIUM 6.1 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the entries
• CVE-2022-43014 MEDIUM 6.1 DOWNGRADE OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the joborde

FAQ

How do I fix opencats vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is opencats being exploited right now?

None of the tracked opencats CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which opencats CVE should I patch first?

CVE-2022-43019 currently ranks highest (66/100): OpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the getDataGridPager.

RSS feed for opencats · ← Back to latest CVEs