PatchTheCVEfreecadweb vulnerabilities
Recent CVEs affecting freecadweb products. 2 tracked.
freecadweb has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-01-25. Highest priority: CVE-2021-45845 (score 57/100).
- CVE-2021-45845 HIGH 7.8 DOWNGRADE MITIGATE The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to ex
- CVE-2021-45844 HIGH 7.8 DOWNGRADE MITIGATE Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject O
FAQ
How do I fix freecadweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is freecadweb being exploited right now?
None of the tracked freecadweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which freecadweb CVE should I patch first?
CVE-2021-45845 currently ranks highest (57/100): The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to ex.