PatchTheCVEfumiao vulnerabilities
Recent CVEs affecting fumiao products. 3 tracked.
fumiao has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-21. Highest priority: CVE-2025-28099 (score 29/100).
- CVE-2025-3317 MEDIUM 4.3 MITIGATE A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec20
- CVE-2025-28099 MEDIUM 4.3 DOWNGRADE opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,
- CVE-2025-0708 LOW 3.5 DOWNGRADE A vulnerability was found in fumiao opencms 2.2
FAQ
How do I fix fumiao vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fumiao being exploited right now?
None of the tracked fumiao CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fumiao CVE should I patch first?
CVE-2025-28099 currently ranks highest (29/100): opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,.