| Package | Affected versions | Patched versions |
|---|---|---|
| sinec ins | = 1.0≤ 1.0 |
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended file system locations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free