PatchTheCVEjrebel vulnerabilities
Recent CVEs affecting jrebel products. 1 tracked.
jrebel has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-07-25. Highest priority: CVE-2018-1002201 (score 48/100).
- CVE-2018-1002201 MEDIUM 5.5 UPGRADE zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a
FAQ
How do I fix jrebel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jrebel being exploited right now?
None of the tracked jrebel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jrebel CVE should I patch first?
CVE-2018-1002201 currently ranks highest (48/100): zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a .