PatchTheCVEroundup-tracker vulnerabilities
Recent CVEs affecting roundup-tracker products. 3 tracked.
roundup-tracker has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-17. Highest priority: CVE-2024-39126 (score 25/100).
- CVE-2024-39126 MEDIUM 5.4 UPGRADE Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.
- CVE-2024-39125 MEDIUM 5.4 UPGRADE Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.
- CVE-2024-39124 MEDIUM 5.4 UPGRADE In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.
FAQ
How do I fix roundup-tracker vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is roundup-tracker being exploited right now?
None of the tracked roundup-tracker CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which roundup-tracker CVE should I patch first?
CVE-2024-39126 currently ranks highest (25/100): Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents..