tightrope media carousel vulnerabilities and fixes

Recent CVEs affecting tightrope media carousel, with upgrade or downgrade steps. 1 tracked.

Also searched as: tightropemediacarousel.

tightrope media carousel has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-08-26. Highest priority: CVE-2019-13020 (score 56/100).

• CVE-2019-13020 CRITICAL 10.0 UPGRADE The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF

FAQ

How do I fix tightrope media carousel vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tightrope media carousel being exploited right now?

None of the tracked tightrope media carousel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tightrope media carousel CVE should I patch first?

CVE-2019-13020 currently ranks highest (56/100): The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF.

← Back to latest CVEs