PatchTheCVEkasseler-cms vulnerabilities
Recent CVEs affecting kasseler-cms products. 3 tracked.
kasseler-cms has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2014-03-13. Highest priority: CVE-2013-3727 (score 53/100).
- CVE-2013-3729 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attacke
- CVE-2013-3728 LOW 3.5 UPGRADE Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with
- CVE-2013-3727 HIGH 7.5 UPGRADE SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitr
FAQ
How do I fix kasseler-cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kasseler-cms being exploited right now?
None of the tracked kasseler-cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kasseler-cms CVE should I patch first?
CVE-2013-3727 currently ranks highest (53/100): SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitr.