webid vulnerabilities and fixes

Q: How do I fix webid vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is webid being exploited right now?

None of the tracked webid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which webid CVE should I patch first?

CVE-2023-47397 currently ranks highest (60/100): WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php..

Recent CVEs affecting webid, with upgrade or downgrade steps. 3 tracked.

webid has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-05-22. Highest priority: CVE-2023-47397 (score 60/100).

CVE-2024-35409 CRITICAL 9.8 DOWNGRADE WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.
CVE-2024-32166 HIGH 8.8 DOWNGRADE Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, al
CVE-2023-47397 CRITICAL 9.8 UPGRADE WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.

FAQ

How do I fix webid vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webid being exploited right now?

None of the tracked webid CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webid CVE should I patch first?

CVE-2023-47397 currently ranks highest (60/100): WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php..

RSS feed for webid · ← Back to latest CVEs