survey vulnerabilities and fixes

Recent CVEs affecting survey, with upgrade or downgrade steps. 3 tracked.

survey has 3 tracked vulnerabilities, 1 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 3. Most recent: 2023-07-24. Highest priority: CVE-2021-27852 (score 92/100).

• CVE-2023-38057 MEDIUM 4.1 UPGRADE An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid a
• CVE-2021-27852 CRITICAL 9.8 EXPLOITED UPGRADE Checkbox Survey Deserialization of Untrusted Data Vulnerability
• CVE-2021-21434 LOW 3.5 UPGRADE Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface

FAQ

How do I fix survey vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is survey being exploited right now?

Yes: 1 survey CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which survey CVE should I patch first?

CVE-2021-27852 currently ranks highest (92/100): Checkbox Survey Deserialization of Untrusted Data Vulnerability.

RSS feed for survey · ← Back to latest CVEs