| Package | Affected versions | Patched versions |
|---|---|---|
| wims | = 3.6.2 |
wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2) account.sh scripts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free