PatchTheCVEsabredav vulnerabilities and fixes
Recent CVEs affecting sabredav, with upgrade or downgrade steps. 2 tracked.
sabredav has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2014-06-04. Highest priority: CVE-2014-2055 (score 47/100).
- CVE-2014-2055 HIGH 7.5 UPGRADE UPGRADE SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attacke
- CVE-2013-1939 MEDIUM 5.0 UPGRADE UPGRADE The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCl
FAQ
How do I fix sabredav vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sabredav being exploited right now?
None of the tracked sabredav CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sabredav CVE should I patch first?
CVE-2014-2055 currently ranks highest (47/100): SabreDAV before 1.7.11, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attacke.