PatchTheCVEarticlecms project vulnerabilities
Recent CVEs affecting articlecms project products. 4 tracked.
articlecms project has 4 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-05-13. Highest priority: CVE-2020-28063 (score 62/100).
- CVE-2020-28063 CRITICAL 9.8 MITIGATE A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.
- CVE-2020-20092 CRITICAL 9.8 DOWNGRADE File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Cont
- CVE-2018-19469 MEDIUM 6.1 UPGRADE ArticleCMS through 2017-02-19 has XSS via the /update_personal_infomation realname or email parameter.
- CVE-2018-12339 MEDIUM 5.4 UPGRADE ArticleCMS through 2017-02-19 has XSS via an "add an article" action.
FAQ
How do I fix articlecms project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is articlecms project being exploited right now?
None of the tracked articlecms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which articlecms project CVE should I patch first?
CVE-2020-28063 currently ranks highest (62/100): A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell..