PatchTheCVEcommon-services vulnerabilities
Recent CVEs affecting common-services products. 5 tracked.
common-services has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-03-03. Highest priority: CVE-2023-40921 (score 50/100).
- CVE-2024-25844 HIGH 7.5 UPGRADE An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before versi
- CVE-2024-25841 MEDIUM 5.9 UPGRADE In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenti
- CVE-2023-45383 HIGH 7.5 UPGRADE In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop,
- CVE-2023-45382 HIGH 7.5 UPGRADE In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest
- CVE-2023-40921 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows att
FAQ
How do I fix common-services vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is common-services being exploited right now?
None of the tracked common-services CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which common-services CVE should I patch first?
CVE-2023-40921 currently ranks highest (50/100): SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows att.