ruvaroa vulnerabilities and fixes

Recent CVEs affecting ruvaroa, with upgrade or downgrade steps. 26 tracked.

ruvaroa has 26 tracked vulnerabilities, 21 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-08. Highest priority: CVE-2024-25523 (score 58/100).

• CVE-2024-25533 CRITICAL 9.4 DOWNGRADE Error messages in RuvarOA v6.01 and v12.01 were discovered to leak the physical path of the website (/WorkFlow
• CVE-2024-25532 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the bt_id parameter at /
• CVE-2024-25531 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at
• CVE-2024-25530 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the PageID parameter at
• CVE-2024-25529 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Wor
• CVE-2024-25528 MEDIUM 5.9 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Per
• CVE-2024-25527 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Per
• CVE-2024-25526 HIGH 8.1 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter
• CVE-2024-25525 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the filename parameter a
• CVE-2024-25524 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id
• CVE-2024-25523 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at
• CVE-2024-25522 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the office_missive_id pa
• CVE-2024-25521 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the txt_keyword paramete
• CVE-2024-25520 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Sys
• CVE-2024-25519 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the idlist parameter at
• CVE-2024-25518 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id paramete
• CVE-2024-25517 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the tbTable argument at
• CVE-2024-25515 HIGH 7.3 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id
• CVE-2024-25514 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the template_id paramete
• CVE-2024-25513 HIGH 7.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at
• CVE-2024-25512 HIGH 8.1 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter
• CVE-2024-25511 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Add
• CVE-2024-25510 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /Add
• CVE-2024-25509 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id
• CVE-2024-25508 CRITICAL 9.8 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the id parameter at /bul
• CVE-2024-25507 CRITICAL 9.4 DOWNGRADE RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the email_attach_id para

FAQ

How do I fix ruvaroa vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ruvaroa being exploited right now?

None of the tracked ruvaroa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ruvaroa CVE should I patch first?

CVE-2024-25523 currently ranks highest (58/100): RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at.

RSS feed for ruvaroa · ← Back to latest CVEs