easy address book web server project vulnerabilities

Recent CVEs affecting easy address book web server project products. 3 tracked.

easy address book web server project has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-04. Highest priority: CVE-2023-4491 (score 55/100).

• CVE-2023-4493 MEDIUM 6.1 DOWNGRADE Stored Cross-Site Scripting in Easy Address Book Web Server 1.6 version, through the users_admin.ghp file that
• CVE-2023-4492 MEDIUM 6.1 DOWNGRADE Vulnerability in Easy Address Book Web Server 1.6 version, affecting the parameters (firstname, homephone, las
• CVE-2023-4491 CRITICAL 9.8 DOWNGRADE Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version

FAQ

How do I fix easy address book web server project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easy address book web server project being exploited right now?

None of the tracked easy address book web server project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easy address book web server project CVE should I patch first?

CVE-2023-4491 currently ranks highest (55/100): Buffer overflow vulnerability in Easy Address Book Web Server 1.6 version.

Products

• easy address book web server

RSS feed for easy address book web server project · ← Back to latest CVEs