PatchTheCVEhkcms vulnerabilities
Recent CVEs affecting hkcms products. 3 tracked.
hkcms has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-21. Highest priority: CVE-2024-52677 (score 52/100).
- CVE-2025-5013 MEDIUM 4.3 DOWNGRADE A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702
- CVE-2025-25761 HIGH 7.2 DOWNGRADE HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter
- CVE-2024-52677 CRITICAL 9.8 UPGRADE HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.ph
FAQ
How do I fix hkcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hkcms being exploited right now?
None of the tracked hkcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hkcms CVE should I patch first?
CVE-2024-52677 currently ranks highest (52/100): HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.ph.