🔐 Daily Security & Standards Brief
- CVE-2015-5477 — ISC BIND Data Processing Errors: patch ISC BIND Data Processing Errors and verify the fix held.
- CVE-2016-3081 — Apache Struts Command: patch Apache Struts Command and verify the fix held.
- CVE-2023-22621 — Strapi Cleartext Storage of Sensitive Information: patch Strapi Cleartext Storage of Sensitive Information and verify the fix held.
- Upgrade Strapi immediately to the latest patched version to remediate cleartext storage of sensitive information in logs or databases
- CVE-2021-3199 — ONLYOFFICE Docs Server: validate paths and patch ONLYOFFICE Docs Server.
- CVE-2015-3306 — ProFTPD: review access controls and patch ProFTPD.
- Upgrade all ProFTPD instances immediately to a patched version mitigating CVE-2015-3306 improper access control vulnerabilities