PatchTheCVEstrongshop vulnerabilities and fixes
Recent CVEs affecting strongshop, with upgrade or downgrade steps. 2 tracked.
strongshop has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-06-17. Highest priority: CVE-2024-37621 (score 43/100).
- CVE-2024-37621 HIGH 7.2 DOWNGRADE StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the compon
- CVE-2024-37619 MEDIUM 6.1 DOWNGRADE StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_gr
FAQ
How do I fix strongshop vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is strongshop being exploited right now?
None of the tracked strongshop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which strongshop CVE should I patch first?
CVE-2024-37621 currently ranks highest (43/100): StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the compon.