PatchTheCVEconcrete5 vulnerabilities
Recent CVEs affecting concrete5 products. 8 tracked.
concrete5 has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2017-03-15. Highest priority: CVE-2017-6908 (score 43/100).
- CVE-2017-6908 MEDIUM 6.1 UPGRADE An issue was discovered in concrete5 <= 5.6.3.4
- CVE-2017-6905 MEDIUM 6.1 UPGRADE An issue was discovered in concrete5 <= 5.6.3.4
- CVE-2015-3989 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject
- CVE-2015-2250 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject
- CVE-2014-9526 MEDIUM 4.3 UPGRADE DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in concrete5 5.7.2.1, 5.7.2, and earlier allow remote atta
- CVE-2014-5108 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in single_pages\download_file.php in concrete5 before 5.6.3 allows re
- CVE-2014-5107 MEDIUM 5.0 DOWNGRADE DOWNGRADE concrete5 before 5.6.3 allows remote attackers to obtain the installation path via a direct request to (1) sys
- CVE-2012-5181 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5
FAQ
How do I fix concrete5 vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is concrete5 being exploited right now?
None of the tracked concrete5 CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which concrete5 CVE should I patch first?
CVE-2017-6908 currently ranks highest (43/100): An issue was discovered in concrete5 <= 5.6.3.4.