| Package | Affected versions | Patched versions |
|---|---|---|
| jspwiki | = 2.4.103= 2.5.139-beta |
JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full path) via an invalid integer in the version parameter to the default URI under attach/Main/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free