| Package | Affected versions | Patched versions |
|---|---|---|
| cx-one | ≤ 4.50 | |
| cx-protocol | ≤ 2.0 |
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free