PatchTheCVEopencrx vulnerabilities and fixes
Recent CVEs affecting opencrx, with upgrade or downgrade steps. 11 tracked.
opencrx has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-02-29. Highest priority: CVE-2023-46502 (score 53/100).
- CVE-2023-46502 CRITICAL 9.8 DOWNGRADE An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request fo
- CVE-2023-40817 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via the Product Configuration Name Field.
- CVE-2023-40816 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Milestone Name Field.
- CVE-2023-40815 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via the Category Creation Name Field.
- CVE-2023-40814 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Name Field.
- CVE-2023-40813 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via Activity Saved Search Creation.
- CVE-2023-40812 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via the Accounts Group Name Field.
- CVE-2023-40810 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via Product Name Field.
- CVE-2023-40809 MEDIUM 6.1 DOWNGRADE OpenCRX version 5.2.0 is vulnerable to HTML injection via the Activity Search Criteria-Activity Number.
- CVE-2023-27151 MEDIUM 6.1 DOWNGRADE openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (i
- CVE-2023-27150 MEDIUM 5.4 DOWNGRADE openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after cr
FAQ
How do I fix opencrx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opencrx being exploited right now?
None of the tracked opencrx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opencrx CVE should I patch first?
CVE-2023-46502 currently ranks highest (53/100): An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request fo.