PatchTheCVEai-dev vulnerabilities
Recent CVEs affecting ai-dev products. 5 tracked.
ai-dev has 5 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-08-16. Highest priority: CVE-2023-31672 (score 60/100).
- CVE-2023-33666 CRITICAL 9.8 UPGRADE ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the c
- CVE-2023-33665 CRITICAL 9.8 UPGRADE ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includ
- CVE-2023-33664 HIGH 8.8 UPGRADE ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the compo
- CVE-2023-33663 CRITICAL 9.8 UPGRADE In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an at
- CVE-2023-31672 CRITICAL 9.8 UPGRADE In the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerabi
FAQ
How do I fix ai-dev vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ai-dev being exploited right now?
None of the tracked ai-dev CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ai-dev CVE should I patch first?
CVE-2023-31672 currently ranks highest (60/100): In the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerabi.