PatchTheCVEpapoo vulnerabilities
Recent CVEs affecting papoo products. 2 tracked.
papoo has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-04-13. Highest priority: CVE-2021-29054 (score 45/100).
- CVE-2021-29054 HIGH 8.8 UPGRADE Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface
- CVE-2014-9522 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers
FAQ
How do I fix papoo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is papoo being exploited right now?
None of the tracked papoo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which papoo CVE should I patch first?
CVE-2021-29054 currently ranks highest (45/100): Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface.