| Package | Affected versions | Patched versions |
|---|---|---|
| fcron | = 2.9.5= 3.0.0 |
convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequences and a symlink attack on the temporary file that is used during conversion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free