PatchTheCVEmachform vulnerabilities
Recent CVEs affecting machform products. 4 tracked.
machform has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-07-01. Highest priority: CVE-2024-37762 (score 58/100).
- CVE-2024-37765 HIGH 8.8 UPGRADE Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings pag
- CVE-2024-37764 MEDIUM 5.4 UPGRADE MachForm up to version 19 is affected by an authenticated stored cross-site scripting.
- CVE-2024-37763 MEDIUM 5.4 UPGRADE MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users wi
- CVE-2024-37762 CRITICAL 9.9 UPGRADE MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote cod
FAQ
How do I fix machform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is machform being exploited right now?
None of the tracked machform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which machform CVE should I patch first?
CVE-2024-37762 currently ranks highest (58/100): MachForm up to version 21 is affected by an authenticated unrestricted file upload which leads to a remote cod.