| Package | Affected versions | Patched versions |
|---|---|---|
| squirrelmail | = 1.4.22 |
A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related to ../ in the att_local_name field in Deliver.class.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free