PatchTheCVErevel vulnerabilities and fixes
Recent CVEs affecting revel, with upgrade or downgrade steps. 1 tracked.
revel has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-12-27. Highest priority: CVE-2020-36568 (score 55/100).
- CVE-2020-36568 HIGH 7.5 UPGRADE Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause
FAQ
How do I fix revel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is revel being exploited right now?
None of the tracked revel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which revel CVE should I patch first?
CVE-2020-36568 currently ranks highest (55/100): Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause.