PatchTheCVEo-dyn vulnerabilities
Recent CVEs affecting o-dyn products. 10 tracked.
o-dyn has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-01-29. Highest priority: CVE-2015-0258 (score 63/100).
- CVE-2021-3298 MEDIUM 5.4 DOWNGRADE Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the pro
- CVE-2020-13655 MEDIUM 6.1 DOWNGRADE An issue was discovered in Collabtive 3.0 and later
- CVE-2019-8935 MEDIUM 5.4 DOWNGRADE Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
- CVE-2015-0258 HIGH 8.8 UPGRADE MITIGATE Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabti
- CVE-2014-3247 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitra
- CVE-2014-3246 MEDIUM 6.5 DOWNGRADE SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL comma
- CVE-2013-6872 MEDIUM 6.5 UPGRADE SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated user
- CVE-2013-5027 CRITICAL 9.8 DOWNGRADE Collabtive 1.0 has incorrect access control
- CVE-2010-5285 MEDIUM 6.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hi
- CVE-2010-5284 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbit
FAQ
How do I fix o-dyn vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is o-dyn being exploited right now?
None of the tracked o-dyn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which o-dyn CVE should I patch first?
CVE-2015-0258 currently ranks highest (63/100): Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabti.