| Package | Affected versions | Patched versions |
|---|---|---|
| cuberite | < 2019-06-11 | 2019-06-11 |
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free