| Package | Affected versions | Patched versions |
|---|---|---|
| knowledgetree document management | = 3.0.0= 3.0.1= 3.0.2= 3.0.3= 3.0.3a= 3.0.3b= 3.1= 3.1a= 3.1b= 3.3= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 3.3.7= 3.4= 3.4.1= 3.4.2= 3.4.3= 3.4.4= 3.4.5= 3.4.6= 3.4a= 3.5.2= 3.5.2a= 3.5.2b= 3.5.2c= 3.5.3≤ 3.5.4 |
The DropDocuments plugin in KnowledgeTree before 3.5.4a allows remote authenticated users to gain administrative privileges via a certain sequence of "browse documents" and dashboard requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free