wxjava vulnerabilities and fixes

Recent CVEs affecting wxjava, with upgrade or downgrade steps. 2 tracked.

wxjava has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-01-04. Highest priority: CVE-2019-5312 (score 64/100).

• CVE-2019-5312 CRITICAL 9.8 UPGRADE An issue was discovered in weixin-java-tools v3.3.0
• CVE-2018-20318 CRITICAL 9.8 DOWNGRADE An issue was discovered in weixin-java-tools v3.2.0

FAQ

How do I fix wxjava vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wxjava being exploited right now?

None of the tracked wxjava CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wxjava CVE should I patch first?

CVE-2019-5312 currently ranks highest (64/100): An issue was discovered in weixin-java-tools v3.3.0.

← Back to latest CVEs