| Package | Affected versions | Patched versions |
|---|---|---|
| ucrypt | ≤ 3.5 |
The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free