| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.thrift:libthrift | ≥ 0.9.2, < 0.12.0 | 0.12.0 |
| thrift | ≥ 0.9.2, ≤ 0.11.0 |
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free