sfu vulnerabilities

Recent CVEs affecting sfu products. 16 tracked.

sfu has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 15. Most recent: 2024-03-01. Highest priority: CVE-2023-5626 (score 42/100).

• CVE-2024-25436 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execut
• CVE-2023-5904 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5903 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5902 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5901 LOW 3.5 UPGRADE Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5900 LOW 3.5 UPGRADE Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5897 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.
• CVE-2023-5896 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
• CVE-2023-5895 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5894 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.
• CVE-2023-5893 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5892 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5891 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5890 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5626 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
• CVE-2023-47271 MEDIUM 5.3 UPGRADE PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) an

FAQ

How do I fix sfu vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sfu being exploited right now?

None of the tracked sfu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sfu CVE should I patch first?

CVE-2023-5626 currently ranks highest (42/100): Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16..

Products

• customlocale
• open journal system
• open journal systems
• pkp web application library

RSS feed for sfu · ← Back to latest CVEs