| Package | Affected versions | Patched versions |
|---|---|---|
| quftp | ≥ 1.5.0, < 1.5.2≥ 1.6.0, < 1.6.2< 1.4.3 | 1.5.21.6.21.4.3 |
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuFTP Service 1.4.3 and later QuFTP Service 1.5.2 and later QuFTP Service 1.6.2 and later
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free