| Package | Affected versions | Patched versions |
|---|---|---|
| electronic document security management system | = v3= v5 |
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free