beekeeperstudio vulnerabilities
Recent CVEs affecting beekeeperstudio products. 2 tracked.
beekeeperstudio has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-05-23. Highest priority: CVE-2022-43143 (score 54/100).
- CVE-2023-28394 HIGH 8.8 UPGRADE Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScrip
- CVE-2022-43143 CRITICAL 9.6 DOWNGRADE A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary we
FAQ
How do I fix beekeeperstudio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is beekeeperstudio being exploited right now?
None of the tracked beekeeperstudio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which beekeeperstudio CVE should I patch first?
CVE-2022-43143 currently ranks highest (54/100): A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary we.