PatchTheCVEantsword project vulnerabilities
Recent CVEs affecting antsword project products. 3 tracked.
antsword project has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-10-26. Highest priority: CVE-2020-18766 (score 55/100).
- CVE-2020-25470 MEDIUM 6.1 DOWNGRADE AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion
- CVE-2020-18766 CRITICAL 9.6 DOWNGRADE A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands.
- CVE-2019-13970 MEDIUM 6.1 UPGRADE In antSword before 2.1.0, self-XSS in the database configuration leads to code execution via modules/database/
FAQ
How do I fix antsword project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is antsword project being exploited right now?
None of the tracked antsword project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which antsword project CVE should I patch first?
CVE-2020-18766 currently ranks highest (55/100): A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands..