PatchTheCVEgmapfp vulnerabilities
Recent CVEs affecting gmapfp products. 2 tracked.
gmapfp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-01. Highest priority: CVE-2020-23972 (score 61/100).
- CVE-2020-23972 HIGH 7.5 DOWNGRADE In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authe
- CVE-2020-23971 HIGH 7.5 DOWNGRADE gmapfp.org Joomla Component GMapFP J3.30pro is affected by Insecure Permissions
FAQ
How do I fix gmapfp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gmapfp being exploited right now?
None of the tracked gmapfp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gmapfp CVE should I patch first?
CVE-2020-23972 currently ranks highest (61/100): In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the upload function without authe.