PatchTheCVEdated news project vulnerabilities
Recent CVEs affecting dated news project products. 4 tracked.
dated news project has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-08-13. Highest priority: CVE-2021-36789 (score 55/100).
- CVE-2021-36792 HIGH 7.2 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming
- CVE-2021-36791 MEDIUM 5.3 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows Information Disclosure of application
- CVE-2021-36790 MEDIUM 6.1 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.
- CVE-2021-36789 CRITICAL 9.8 UPGRADE The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.
FAQ
How do I fix dated news project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dated news project being exploited right now?
None of the tracked dated news project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dated news project CVE should I patch first?
CVE-2021-36789 currently ranks highest (55/100): The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection..