| Package | Affected versions | Patched versions |
|---|---|---|
| jana web server | = 1.0j= 1.45= 2.0_beta_1≤ 1.46 |
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free