PatchTheCVEreminder vulnerabilities and fixes
Recent CVEs affecting reminder, with upgrade or downgrade steps. 2 tracked.
reminder has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-06-16. Highest priority: CVE-2023-30453 (score 26/100).
- CVE-2023-30453 MEDIUM 5.4 UPGRADE The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.
- CVE-2022-39876 MEDIUM 5.9 UPGRADE Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows at
FAQ
How do I fix reminder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is reminder being exploited right now?
None of the tracked reminder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which reminder CVE should I patch first?
CVE-2023-30453 currently ranks highest (26/100): The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter..