PatchTheCVEyellowbox crm vulnerabilities and fixes
Recent CVEs affecting yellowbox crm, with upgrade or downgrade steps. 4 tracked.
Also searched as: yellowboxcrm.
yellowbox crm has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-01-21. Highest priority: CVE-2019-14768 (score 54/100).
- CVE-2019-14768 HIGH 8.8 UPGRADE An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authen
- CVE-2019-14767 HIGH 7.5 UPGRADE In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichie
- CVE-2019-14766 MEDIUM 6.5 UPGRADE Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to
- CVE-2019-14765 HIGH 8.8 UPGRADE Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard aut
FAQ
How do I fix yellowbox crm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yellowbox crm being exploited right now?
None of the tracked yellowbox crm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yellowbox crm CVE should I patch first?
CVE-2019-14768 currently ranks highest (54/100): An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authen.