PatchTheCVEchaos tool suite project vulnerabilities
Recent CVEs affecting chaos tool suite project products. 7 tracked.
chaos tool suite project has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-08-07. Highest priority: CVE-2015-7875 (score 48/100).
- CVE-2015-7875 HIGH 7.5 DOWNGRADE ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for
- CVE-2015-6665 MEDIUM 4.3 MITIGATE DOWNGRADE Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6
- CVE-2015-4398 MEDIUM 5.8 UPGRADE Open redirect vulnerability in the Chaos tool suite (ctools) module before 6.x-1.12 and 7.x-1.x before 7.x-1.7
- CVE-2015-4375 MEDIUM 4.3 DOWNGRADE The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensi
- CVE-2013-1925 LOW 3.5 DOWNGRADE The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access,
- CVE-2012-5559 LOW 2.6 DOWNGRADE Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) m
- CVE-2012-2082 LOW 2.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Chaos tool suite (aka CTools) module 7.x-1.x before 7.x-1.0 fo
FAQ
How do I fix chaos tool suite project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is chaos tool suite project being exploited right now?
None of the tracked chaos tool suite project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which chaos tool suite project CVE should I patch first?
CVE-2015-7875 currently ranks highest (48/100): ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for .
Products
RSS feed for chaos tool suite project · ← Back to latest CVEs