PatchTheCVEthyme vulnerabilities and fixes
Recent CVEs affecting thyme, with upgrade or downgrade steps. 3 tracked.
thyme has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-03-06. Highest priority: CVE-2009-0535 (score 52/100).
- CVE-2009-0535 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, a
- CVE-2008-6404 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in add_calendars.php in eXtrovert Software Thyme 1.3 allows remote at
- CVE-2008-4459 HIGH 7.5 DOWNGRADE SQL injection vulnerability in pick_users.php in the groups module in eXtrovert Thyme 1.3 allows remote attack
FAQ
How do I fix thyme vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is thyme being exploited right now?
None of the tracked thyme CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which thyme CVE should I patch first?
CVE-2009-0535 currently ranks highest (52/100): Directory traversal vulnerability in export.php in Thyme 1.3 and earlier, when register_globals is disabled, a.