PatchTheCVEmakina-corpus vulnerabilities
Recent CVEs affecting makina-corpus products. 2 tracked.
makina-corpus has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-05-12. Highest priority: CVE-2014-3243 (score 44/100).
- CVE-2014-3243 MEDIUM 5.0 DOWNGRADE SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cau
- CVE-2014-3242 MEDIUM 5.0 DOWNGRADE SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity
FAQ
How do I fix makina-corpus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is makina-corpus being exploited right now?
None of the tracked makina-corpus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which makina-corpus CVE should I patch first?
CVE-2014-3243 currently ranks highest (44/100): SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cau.