PatchTheCVErental module vulnerabilities and fixes
Recent CVEs affecting rental module, with upgrade or downgrade steps. 2 tracked.
Also searched as: rentalmodule.
rental module has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-05-20. Highest priority: CVE-2023-2712 (score 57/100).
- CVE-2023-2713 CRITICAL 9.8 UPGRADE Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party fo
- CVE-2023-2712 CRITICAL 9.8 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for
FAQ
How do I fix rental module vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rental module being exploited right now?
None of the tracked rental module CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rental module CVE should I patch first?
CVE-2023-2712 currently ranks highest (57/100): Unrestricted Upload of File with Dangerous Type vulnerability in "Rental Module" developed by third-party for.