PatchTheCVEkiwitcms vulnerabilities
Recent CVEs affecting kiwitcms products. 11 tracked.
kiwitcms has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2023-07-05. Highest priority: CVE-2023-30628 (score 58/100).
- CVE-2023-36809 HIGH 8.1 UPGRADE Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases,
- CVE-2023-33977 HIGH 8.1 UPGRADE Kiwi TCMS is an open source test management system for both manual and automated testing
- CVE-2023-32686 HIGH 8.1 UPGRADE Kiwi TCMS is an open source test management system for both manual and automated testing
- CVE-2023-30628 HIGH 8.8 UPGRADE Kiwi TCMS is an open source test management system
- CVE-2023-30613 HIGH 8.1 UPGRADE Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases
- CVE-2023-30544 LOW 3.9 UPGRADE Kiwi TCMS is an open source test management system
- CVE-2023-27489 HIGH 7.6 UPGRADE Kiwi TCMS is an open source test management system for both manual and automated testing
- CVE-2023-25171 HIGH 7.5 UPGRADE Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0
- CVE-2023-25156 HIGH 7.5 UPGRADE Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0
- CVE-2023-22451 MEDIUM 6.5 UPGRADE Kiwi TCMS is an open source test management system
- CVE-2022-4105 MEDIUM 5.4 UPGRADE A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to
FAQ
How do I fix kiwitcms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kiwitcms being exploited right now?
None of the tracked kiwitcms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kiwitcms CVE should I patch first?
CVE-2023-30628 currently ranks highest (58/100): Kiwi TCMS is an open source test management system.