PatchTheCVEtime in status vulnerabilities and fixes
Recent CVEs affecting time in status, with upgrade or downgrade steps. 1 tracked.
Also searched as: timeinstatus.
time in status has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-03-08. Highest priority: CVE-2021-27222 (score 34/100).
- CVE-2021-27222 MEDIUM 5.4 UPGRADE In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.
FAQ
How do I fix time in status vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is time in status being exploited right now?
None of the tracked time in status CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which time in status CVE should I patch first?
CVE-2021-27222 currently ranks highest (34/100): In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS..