| Package | Affected versions | Patched versions |
|---|---|---|
| nextchat | ≤ 2.16.0 |
Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free