| Package | Affected versions | Patched versions |
|---|---|---|
| zkbio cvsecurity | = 6.1.1 |
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE: Third parties have indicated other versions are also vulnerable including up to 6.4.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free