| Package | Affected versions | Patched versions |
|---|---|---|
| smartics | = 2.3.4.0 |
Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free