PatchTheCVEviewcvs vulnerabilities and fixes
Recent CVEs affecting viewcvs, with upgrade or downgrade steps. 5 tracked.
viewcvs has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-31. Highest priority: CVE-2005-4830 (score 52/100).
- CVE-2005-4831 MEDIUM 4.3 DOWNGRADE viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the co
- CVE-2005-4830 HIGH 7.6 DOWNGRADE CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP head
- CVE-2004-1062 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrar
- CVE-2004-0915 MEDIUM 5.0 DOWNGRADE MITIGATE Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does n
- CVE-2002-0771 MEDIUM 6.4 DOWNGRADE Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script a
FAQ
How do I fix viewcvs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is viewcvs being exploited right now?
None of the tracked viewcvs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which viewcvs CVE should I patch first?
CVE-2005-4830 currently ranks highest (52/100): CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP head.