| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/plentico/plenti | < 0.7.2 | 0.7.2 |
| plenti | < 0.7.2 | 0.7.2 |
Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7.2 fixes the vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free