PatchTheCVEzippy vulnerabilities and fixes
Recent CVEs affecting zippy, with upgrade or downgrade steps. 3 tracked.
zippy has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-03-21. Highest priority: CVE-2024-27964 (score 43/100).
- CVE-2024-27964 HIGH 8.8 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affec
- CVE-2023-36381 MEDIUM 6.6 UPGRADE Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from
- CVE-2023-26533 MEDIUM 6.5 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.This
FAQ
How do I fix zippy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zippy being exploited right now?
None of the tracked zippy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zippy CVE should I patch first?
CVE-2024-27964 currently ranks highest (43/100): Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affec.