PatchTheCVEspringbootcms vulnerabilities and fixes
Recent CVEs affecting springbootcms, with upgrade or downgrade steps. 3 tracked.
springbootcms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-07-07. Highest priority: CVE-2023-43192 (score 51/100).
- CVE-2024-6539 LOW 3.5 UPGRADE A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28
- CVE-2023-43192 HIGH 8.8 DOWNGRADE SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submit
- CVE-2023-43191 MEDIUM 5.4 DOWNGRADE SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database
FAQ
How do I fix springbootcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is springbootcms being exploited right now?
None of the tracked springbootcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which springbootcms CVE should I patch first?
CVE-2023-43192 currently ranks highest (51/100): SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submit.