How many CVEs have a located fix in exponentcms/exponent-cms?

22 published CVEs have a fix traced to functions in exponentcms/exponent-cms, touching 68 functions across 24 files.

Which function in exponentcms/exponent-cms has been patched by the most CVEs?

routeRequest in framework/core/subsystems/expRouter.php has been changed by 4 CVE fixes, from 2016 to 2019.

How large is a typical CVE fix in exponentcms/exponent-cms?

The median fix changes 7 lines. 73% of fixes change 20 lines or fewer, and 41% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#234 of 500 repositories

exponentcms/exponent-cms

Name: exponentcms/exponent-cms: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix May 24, 2019

22

CVE fixes located

Published CVEs

68

Functions patched

Distinct function sites

24

Files patched

Distinct source files

2016–2019

Years covered

By CVE publication date

Overview

22 published CVEs have a fix traced to functions in exponentcms/exponent-cms, the earliest published in 2016. Those fixes changed 68 distinct functions across 24 files, in 222 patch hunks.

Among the 500 repositories tracked here, exponentcms/exponent-cms ranks #234 by the number of CVEs with a located fix.

Most patched functions

Functions in exponentcms/exponent-cms changed by the most CVE fixes.

Most patched files

Files in exponentcms/exponent-cms changed by the most CVE fixes.

1framework/core/subsystems/expRouter.php4 CVEs · 19 functions
2framework/modules/pixidou/controllers/pixidouController.php3 CVEs · 2 functions
3framework/modules/search/controllers/searchController.php2 CVEs · 4 functions
4framework/core/controllers/expController.php2 CVEs · 2 functions
5framework/core/subsystems/expString.php2 CVEs · 2 functions
6framework/modules/core/controllers/expHTMLEditorController.php2 CVEs · 2 functions
7framework/modules/navigation/controllers/navigationController.php2 CVEs · 2 functions
8framework/modules/users/controllers/usersController.php2 CVEs · 2 functions
9framework/core/subsystems/expPaginator.php2 CVEs · 1 functions
10framework/modules/help/controllers/helpController.php2 CVEs · 1 functions

Fix size

How much code a CVE fix in exponentcms/exponent-cms changes, with backports counted once.

7

Median lines changed

Added plus removed, per CVE

73%

Fixes of 20 lines or fewer

Share of CVE fixes

41%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in exponentcms/exponent-cms, and the functions each fix changed.

CVE-2016-8898
CVE-2016-8898routeRequest
Critical · CVSS 9.8
EPSS 1.8%2019-05-24
CVE-2017-8085
CVE-2017-8085validName
Medium · CVSS 6.1
EPSS 1.1%2017-04-24
CVE-2017-7991
CVE-2017-7991api
Critical · CVSS 9.8
EPSS 2.1%2017-04-22
CVE-2016-7784
CVE-2016-7784routePageRequest makeLink isMappedURL
Critical · CVSS 9.8
EPSS 2.6%2017-03-07
CVE-2016-7565
CVE-2016-7565pop
Critical · CVSS 9.8
EPSS 2.3%2017-02-13
CVE-2016-7400
CVE-2016-7400sanitize routeRequest injectProof
Critical · CVSS 9.8
EPSS 4.7%2017-02-07
CVE-2016-9287
CVE-2016-9287hasContent page_not_found
Critical · CVSS 9.8
EPSS 1.5%2016-11-15
CVE-2016-9288
CVE-2016-9288DragnDropReRank navigationController
Critical · CVSS 9.8
EPSS 1.5%2016-11-11
CVE-2016-9286
CVE-2016-9286show
Medium · CVSS 5.3
EPSS 1.5%2016-11-11
CVE-2016-9283
CVE-2016-9283routeRequest convertPartsToParams splitURL
High · CVSS 7.5
EPSS 1.7%2016-11-11
CVE-2016-9282
CVE-2016-9282search
High · CVSS 7.5
EPSS 1.7%2016-11-11
CVE-2016-9284
CVE-2016-9284usersController
Medium · CVSS 5.3
EPSS 1.5%2016-11-11

Get an alert for each new exponentcms/exponent-cms CVE, with the patched functions and AI-written analysis.

Monitor exponent-cms CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

BerriAI/litellm22 CVEs cockpit-hq/cockpit22 CVEs cvat-ai/cvat22 CVEs frappe/erpnext22 CVEs GNOME/libxml222 CVEs libgd/libgd22 CVEs nuxt/nuxt22 CVEs OctoPrint/OctoPrint22 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in exponentcms/exponent-cms.

How many CVEs have a located fix in exponentcms/exponent-cms?: 22 published CVEs have a fix traced to functions in exponentcms/exponent-cms, touching 68 functions across 24 files.
Which function in exponentcms/exponent-cms has been patched by the most CVEs?: routeRequest in framework/core/subsystems/expRouter.php has been changed by 4 CVE fixes, from 2016 to 2019.
How large is a typical CVE fix in exponentcms/exponent-cms?: The median fix changes 7 lines. 73% of fixes change 20 lines or fewer, and 41% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track exponentcms/exponent-cms CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing