| Package | Affected versions | Patched versions |
|---|---|---|
| autosave | ≥ 7.00, ≤ 7.04< 6.02.06 | 6.02.06 |
| autosave for system platform | = 5.00< 4.01 | 4.01 |
An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free