PatchTheCVEjournyx vulnerabilities
Recent CVEs affecting journyx products. 4 tracked.
journyx has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-08-08. Highest priority: CVE-2024-6893 (score 61/100).
- CVE-2024-6893 HIGH 7.5 DOWNGRADE The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities
- CVE-2024-6892 MEDIUM 6.1 DOWNGRADE Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the
- CVE-2024-6891 HIGH 8.8 DOWNGRADE Attackers with a valid username and password can exploit a python code injection vulnerability during the natu
- CVE-2024-6890 HIGH 8.8 DOWNGRADE Password reset tokens are generated using an insecure source of randomness
FAQ
How do I fix journyx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is journyx being exploited right now?
None of the tracked journyx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which journyx CVE should I patch first?
CVE-2024-6893 currently ranks highest (61/100): The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities.