| Package | Affected versions | Patched versions |
|---|---|---|
| syspass | ≥ 3.2.0, ≤ 3.2.11 |
The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free