PatchTheCVEresearch-artisan vulnerabilities
Recent CVEs affecting research-artisan products. 2 tracked.
research-artisan has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-07-26. Highest priority: CVE-2015-2975 (score 35/100).
- CVE-2015-2976 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attacker
- CVE-2015-2975 MEDIUM 5.0 UPGRADE Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers
FAQ
How do I fix research-artisan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is research-artisan being exploited right now?
None of the tracked research-artisan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which research-artisan CVE should I patch first?
CVE-2015-2975 currently ranks highest (35/100): Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers.