PatchTheCVEquiz vulnerabilities and fixes
Recent CVEs affecting quiz, with upgrade or downgrade steps. 3 tracked.
quiz has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-09-01. Highest priority: CVE-2015-6736 (score 39/100).
- CVE-2015-6736 MEDIUM 5.0 MITIGATE The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters
- CVE-2013-4501 MEDIUM 5.0 DOWNGRADE The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensi
- CVE-2013-4500 MEDIUM 4.9 DOWNGRADE The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz re
FAQ
How do I fix quiz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quiz being exploited right now?
None of the tracked quiz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quiz CVE should I patch first?
CVE-2015-6736 currently ranks highest (39/100): The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters.