PatchTheCVEopen atrium project vulnerabilities
Recent CVEs affecting open atrium project products. 3 tracked.
open atrium project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2018-02-01. Highest priority: CVE-2014-9504 (score 50/100).
- CVE-2014-9504 HIGH 7.5 UPGRADE The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remo
- CVE-2014-9503 MEDIUM 6.5 UPGRADE The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenti
- CVE-2014-9502 HIGH 8.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium modul
FAQ
How do I fix open atrium project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open atrium project being exploited right now?
None of the tracked open atrium project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open atrium project CVE should I patch first?
CVE-2014-9504 currently ranks highest (50/100): The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remo.