PatchTheCVErssowl vulnerabilities and fixes
Recent CVEs affecting rssowl, with upgrade or downgrade steps. 2 tracked.
rssowl has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2012-06-04. Highest priority: CVE-2006-4760 (score 38/100).
- CVE-2012-1252 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary we
- CVE-2006-4760 MEDIUM 4.3 MITIGATE Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote
FAQ
How do I fix rssowl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rssowl being exploited right now?
None of the tracked rssowl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rssowl CVE should I patch first?
CVE-2006-4760 currently ranks highest (38/100): Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote .