PatchTheCVEsimplybook vulnerabilities and fixes
Recent CVEs affecting simplybook, with upgrade or downgrade steps. 3 tracked.
simplybook has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2019-05-17. Highest priority: CVE-2019-11887 (score 60/100).
- CVE-2019-11887 CRITICAL 9.8 UPGRADE SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code executio
- CVE-2019-11489 HIGH 8.8 UPGRADE Incorrect Access Control in the Administrative Management Interface in SimplyBook.me Enterprise before 2019-04
- CVE-2019-11488 HIGH 8.1 UPGRADE Incorrect Access Control in the Account Access / Password Reset Link in SimplyBook.me Enterprise before 2019-0
FAQ
How do I fix simplybook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simplybook being exploited right now?
None of the tracked simplybook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simplybook CVE should I patch first?
CVE-2019-11887 currently ranks highest (60/100): SimplyBook.me through 2019-05-11 does not properly restrict File Upload which could allow remote code executio.