| Package | Affected versions | Patched versions |
|---|---|---|
| bscw | = 3.3= 3.3.1= 3.4.1= 3.4.3= 4.0.1_beta≤ 4.0.2_beta |
BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free