| Package | Affected versions | Patched versions |
|---|---|---|
| flexair | ≤ 2.3.38 |
Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free