PatchTheCVEmicroengine vulnerabilities
Recent CVEs affecting microengine products. 2 tracked.
microengine has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-05-23. Highest priority: CVE-2023-27507 (score 57/100).
- CVE-2023-27507 CRITICAL 9.8 UPGRADE MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability
- CVE-2023-27397 CRITICAL 9.8 UPGRADE Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8
FAQ
How do I fix microengine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is microengine being exploited right now?
None of the tracked microengine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which microengine CVE should I patch first?
CVE-2023-27507 currently ranks highest (57/100): MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability.