| Package | Affected versions | Patched versions |
|---|---|---|
| serv-u | = 2.4= 2.5= 2.5a= 2.5b= 2.5c= 2.5d |
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free