PatchTheCVEgleeztech vulnerabilities
Recent CVEs affecting gleeztech products. 4 tracked.
gleeztech has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-07. Highest priority: CVE-2018-13340 (score 49/100).
- CVE-2018-1999021 MEDIUM 5.4 DOWNGRADE Gleezcms Gleez Cms version 1.3.0 contains a Cross Site Scripting (XSS) vulnerability in Profile page that can
- CVE-2018-16704 MEDIUM 4.3 DOWNGRADE An issue was discovered in Gleez CMS v1.2.0
- CVE-2018-16703 MEDIUM 5.3 DOWNGRADE A vulnerability in the Gleez CMS 1.2.0 login page could allow an unauthenticated, remote attacker to perform m
- CVE-2018-13340 HIGH 8.8 DOWNGRADE Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request.
FAQ
How do I fix gleeztech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gleeztech being exploited right now?
None of the tracked gleeztech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gleeztech CVE should I patch first?
CVE-2018-13340 currently ranks highest (49/100): Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request..