PatchTheCVEbumsys project vulnerabilities
Recent CVEs affecting bumsys project products. 8 tracked.
bumsys project has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-05-22. Highest priority: CVE-2023-0455 (score 59/100).
- CVE-2023-2832 HIGH 7.2 UPGRADE SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2554 HIGH 7.2 UPGRADE External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2553 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2552 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
- CVE-2023-2551 HIGH 8.8 UPGRADE PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
- CVE-2023-1362 MEDIUM 6.1 UPGRADE Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.
- CVE-2023-1361 MEDIUM 6.5 UPGRADE SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.
- CVE-2023-0455 HIGH 8.8 DOWNGRADE Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
FAQ
How do I fix bumsys project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bumsys project being exploited right now?
None of the tracked bumsys project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bumsys project CVE should I patch first?
CVE-2023-0455 currently ranks highest (59/100): Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta..