PatchTheCVEtadtools vulnerabilities and fixes
Recent CVEs affecting tadtools, with upgrade or downgrade steps. 3 tracked.
tadtools has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-10-08. Highest priority: CVE-2021-41566 (score 60/100).
- CVE-2021-41975 HIGH 7.5 UPGRADE TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parame
- CVE-2021-41566 CRITICAL 9.8 UPGRADE The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any
- CVE-2021-41565 MEDIUM 6.1 UPGRADE TadTools special page parameter does not properly restrict the input of specific characters, thus remote attac
FAQ
How do I fix tadtools vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tadtools being exploited right now?
None of the tracked tadtools CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tadtools CVE should I patch first?
CVE-2021-41566 currently ranks highest (60/100): The file extension of the TadTools file upload function fails to filter, thus remote attackers can upload any .