webidsupport vulnerabilities

Q: How do I fix webidsupport vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is webidsupport being exploited right now?

None of the tracked webidsupport CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which webidsupport CVE should I patch first?

CVE-2023-47397 currently ranks highest (60/100): WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php..

Recent CVEs affecting webidsupport products. 3 tracked.

webidsupport has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-05-22. Highest priority: CVE-2023-47397 (score 60/100).

CVE-2024-35409 CRITICAL 9.8 DOWNGRADE WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php.
CVE-2024-32166 HIGH 8.8 DOWNGRADE Webid v1.2.1 suffers from an Insecure Direct Object Reference (IDOR) - Broken Access Control vulnerability, al
CVE-2023-47397 CRITICAL 9.8 UPGRADE WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.

FAQ

How do I fix webidsupport vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is webidsupport being exploited right now?

None of the tracked webidsupport CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which webidsupport CVE should I patch first?

CVE-2023-47397 currently ranks highest (60/100): WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php..

Products

webid

RSS feed for webidsupport · ← Back to latest CVEs