PatchTheCVEnas4free vulnerabilities
Recent CVEs affecting nas4free products. 1 tracked.
nas4free has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2013-11-02. Highest priority: CVE-2013-3631 (score 50/100).
- CVE-2013-3631 MEDIUM 6.0 UPGRADE NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request
FAQ
How do I fix nas4free vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nas4free being exploited right now?
None of the tracked nas4free CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nas4free CVE should I patch first?
CVE-2013-3631 currently ranks highest (50/100): NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request.