| Package | Affected versions | Patched versions |
|---|---|---|
| vantara pentaho | ≤ 9.1.0.0 |
UploadService in Hitachi Vantara Pentaho Business Analytics through 9.1 does not properly verify uploaded user files, which allows an authenticated user to upload various files of different file types. Specifically, a .jsp file is not allowed, but a .jsp. file is allowed (and leads to remote code execution).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free