| Package | Affected versions | Patched versions |
|---|---|---|
| trufusion | < 7.9.6.1 | 7.9.6.1 |
An arbitrary file upload vulnerability in Rocket TRUfusion Enterprise before 7.9.6.1 allows unauthenticated attackers to execute arbitrary code via a crafted JSP file. Issue fixed in version 7.9.6.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free