PatchTheCVEbonobogitserver vulnerabilities
Recent CVEs affecting bonobogitserver products. 2 tracked.
bonobogitserver has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-04-24. Highest priority: CVE-2019-11217 (score 62/100).
- CVE-2019-11218 HIGH 8.8 UPGRADE Improper handling of extra parameters in the AccountController (User Profile edit) in Jakub Chodounsky Bonobo
- CVE-2019-11217 CRITICAL 9.8 UPGRADE The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in
FAQ
How do I fix bonobogitserver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bonobogitserver being exploited right now?
None of the tracked bonobogitserver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bonobogitserver CVE should I patch first?
CVE-2019-11217 currently ranks highest (62/100): The GitController in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows execution of arbitrary commands in.