| Package | Affected versions | Patched versions |
|---|---|---|
| powerarchiver | < 20.10.02 | 20.10.02 |
The XML parser used in ConeXware PowerArchiver before 20.10.02 allows processing of external entities, which might lead to exfiltration of local files over the network (via an XXE attack).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free