| Package | Affected versions | Patched versions |
|---|---|---|
| application programming interface | < 21.3.60 | 21.3.60 |
Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free