PatchTheCVEteamworktec vulnerabilities
Recent CVEs affecting teamworktec products. 3 tracked.
teamworktec has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-09-28. Highest priority: CVE-2017-14840 (score 58/100).
- CVE-2017-14840 HIGH 8.8 MITIGATE TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.
- CVE-2017-14839 HIGH 8.8 MITIGATE TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.
- CVE-2017-14838 HIGH 8.8 MITIGATE TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.
FAQ
How do I fix teamworktec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is teamworktec being exploited right now?
None of the tracked teamworktec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which teamworktec CVE should I patch first?
CVE-2017-14840 currently ranks highest (58/100): TeamWork TicketPlus allows Arbitrary File Upload in updateProfile..