simple editor vulnerabilities and fixes

Recent CVEs affecting simple editor, with upgrade or downgrade steps. 25 tracked.

Also searched as: simpleeditor.

simple editor has 25 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-05-03. Highest priority: CVE-2023-40504 (score 72/100).

• CVE-2023-40516 HIGH 7.8 DOWNGRADE LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability
• CVE-2023-40515 HIGH 7.5 DOWNGRADE LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability
• CVE-2023-40514 MEDIUM 6.5 DOWNGRADE LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerabi
• CVE-2023-40513 MEDIUM 6.5 DOWNGRADE LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerabil
• CVE-2023-40512 MEDIUM 6.5 DOWNGRADE LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40511 HIGH 7.5 DOWNGRADE LG Simple Editor checkServer Authentication Bypass Vulnerability
• CVE-2023-40510 HIGH 7.5 DOWNGRADE LG Simple Editor getServerSetting Authentication Bypass Vulnerability
• CVE-2023-40509 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40508 CRITICAL 9.1 DOWNGRADE LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40507 HIGH 7.5 DOWNGRADE LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40506 HIGH 7.5 DOWNGRADE LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40505 CRITICAL 9.8 DOWNGRADE LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability
• CVE-2023-40504 CRITICAL 9.8 DOWNGRADE LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
• CVE-2023-40503 HIGH 7.5 DOWNGRADE LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40502 CRITICAL 9.1 DOWNGRADE LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40501 CRITICAL 9.8 DOWNGRADE LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
• CVE-2023-40500 CRITICAL 9.8 DOWNGRADE LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
• CVE-2023-40499 CRITICAL 9.1 DOWNGRADE LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40498 CRITICAL 9.8 DOWNGRADE LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40497 CRITICAL 9.8 DOWNGRADE LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40496 HIGH 7.5 DOWNGRADE LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40495 HIGH 7.5 DOWNGRADE LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40494 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40493 CRITICAL 9.8 DOWNGRADE LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40492 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

FAQ

How do I fix simple editor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is simple editor being exploited right now?

None of the tracked simple editor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which simple editor CVE should I patch first?

CVE-2023-40504 currently ranks highest (72/100): LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability.

RSS feed for simple editor · ← Back to latest CVEs