PatchTheCVEuyuni-project vulnerabilities
Recent CVEs affecting uyuni-project products. 4 tracked.
uyuni-project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-11-10. Highest priority: CVE-2021-40348 (score 55/100).
- CVE-2022-43754 LOW 2.6 UPGRADE UPGRADE An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in space
- CVE-2022-43753 MEDIUM 4.3 UPGRADE UPGRADE A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uy
- CVE-2022-31255 MEDIUM 4.3 UPGRADE UPGRADE An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/U
- CVE-2021-40348 HIGH 8.8 DOWNGRADE DOWNGRADE Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection
FAQ
How do I fix uyuni-project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is uyuni-project being exploited right now?
None of the tracked uyuni-project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which uyuni-project CVE should I patch first?
CVE-2021-40348 currently ranks highest (55/100): Spacewalk 2.10, and derivatives such as Uyuni 2021.08, allows code injection.