| Package | Affected versions | Patched versions |
|---|---|---|
| servicetonic | < 9.0.035937 | 9.0.035937 |
Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free