PatchTheCVEbrassica vulnerabilities
Recent CVEs affecting brassica products. 3 tracked.
brassica has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-09-18. Highest priority: CVE-2020-15188 (score 68/100).
- CVE-2020-15189 MEDIUM 6.8 UPGRADE SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload
- CVE-2020-15188 CRITICAL 10.0 UPGRADE SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE)
- CVE-2019-11376 HIGH 7.2 DOWNGRADE SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text
FAQ
How do I fix brassica vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is brassica being exploited right now?
None of the tracked brassica CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which brassica CVE should I patch first?
CVE-2020-15188 currently ranks highest (68/100): SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE).