| Package | Affected versions | Patched versions |
|---|---|---|
| neon webmail | = 5.06= 5.07 |
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free