| Package | Affected versions | Patched versions |
|---|---|---|
| nopcommerce | = 4.20 |
RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFilemanService.cs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free