PatchTheCVEpuppycms vulnerabilities and fixes
Recent CVEs affecting puppycms, with upgrade or downgrade steps. 4 tracked.
puppycms has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-10-12. Highest priority: CVE-2020-18890 (score 63/100).
- CVE-2022-3464 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic has been found in puppyCMS up to 5.1
- CVE-2020-18890 CRITICAL 9.8 DOWNGRADE Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remot
- CVE-2020-18889 MEDIUM 6.5 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /adm
- CVE-2020-18888 HIGH 7.5 DOWNGRADE Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/fo
FAQ
How do I fix puppycms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is puppycms being exploited right now?
None of the tracked puppycms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which puppycms CVE should I patch first?
CVE-2020-18890 currently ranks highest (63/100): Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remot.