PatchTheCVEbaijiacms project vulnerabilities
Recent CVEs affecting baijiacms project products. 3 tracked.
baijiacms project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-15. Highest priority: CVE-2022-45942 (score 60/100).
- CVE-2022-45942 HIGH 8.8 DOWNGRADE A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.
- CVE-2022-38931 HIGH 8.8 DOWNGRADE A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote att
- CVE-2021-33396 MEDIUM 6.5 DOWNGRADE Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or
FAQ
How do I fix baijiacms project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is baijiacms project being exploited right now?
None of the tracked baijiacms project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which baijiacms project CVE should I patch first?
CVE-2022-45942 currently ranks highest (60/100): A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4..