PatchTheCVEmono vulnerabilities
Recent CVEs affecting mono products. 4 tracked.
mono has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2020-04-29. Highest priority: CVE-2020-12471 (score 66/100).
- CVE-2020-12473 HIGH 7.2 UPGRADE MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executabl
- CVE-2020-12472 MEDIUM 5.4 UPGRADE MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.
- CVE-2020-12471 CRITICAL 9.8 UPGRADE MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-U
- CVE-2020-12470 HIGH 7.2 UPGRADE MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.
FAQ
How do I fix mono vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mono being exploited right now?
None of the tracked mono CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mono CVE should I patch first?
CVE-2020-12471 currently ranks highest (66/100): MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-U.