| Package | Affected versions | Patched versions |
|---|---|---|
| evolution | = 1.0.8= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.4= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 2.0.0= 2.0.1= 2.0.2= 2.12= 2.24= 2.4= 2.6≤ 2.26.1 |
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free