PatchTheCVEmoov vulnerabilities
Recent CVEs affecting moov products. 1 tracked.
moov has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-30. Highest priority: CVE-2023-34205 (score 45/100).
- CVE-2023-34205 CRITICAL 9.1 DOWNGRADE In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing
FAQ
How do I fix moov vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is moov being exploited right now?
None of the tracked moov CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which moov CVE should I patch first?
CVE-2023-34205 currently ranks highest (45/100): In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing.