| Package | Affected versions | Patched versions |
|---|---|---|
| fluig | = 1.6.4= 1.6.5= 1.7.0 |
The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free