| Package | Affected versions | Patched versions |
|---|---|---|
| agiloft | ≥ 19, < 31 | 31 |
Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perform path traversal on the local system files. Users should upgrade to Agiloft Release 31.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free