webuzo vulnerabilities and fixes

Recent CVEs affecting webuzo, with upgrade or downgrade steps. 3 tracked.

webuzo has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-25. Highest priority: CVE-2024-24621 (score 56/100).

• CVE-2024-24623 HIGH 8.8 UPGRADE Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality
• CVE-2024-24622 HIGH 8.8 UPGRADE Softaculous Webuzo contains a command injection in the password reset functionality
• CVE-2024-24621 CRITICAL 9.8 UPGRADE Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality

FAQ

How do I fix webuzo vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webuzo being exploited right now?

None of the tracked webuzo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webuzo CVE should I patch first?

CVE-2024-24621 currently ranks highest (56/100): Softaculous Webuzo contains an authentication bypass vulnerability through the password reset functionality.

RSS feed for webuzo · ← Back to latest CVEs