| Package | Affected versions | Patched versions |
|---|---|---|
| xevo | ≤ 1.2.0 |
OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free