| Package | Affected versions | Patched versions |
|---|---|---|
| hashbrown cms | < 1.3.2 | 1.3.2 |
| hashbrown-cms | < 1.3.2 | 1.3.2 |
An issue was discovered in HashBrown CMS before 1.3.2. Server/Entity/Resource/Connection.js allows an attacker to reach a parent directory via a crafted name or ID field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free