| Package | Affected versions | Patched versions |
|---|---|---|
| arsdigita community education solution | = 1.1 | |
| arsdigita community system | ≤ 3.4.10 |
Directory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and ArsDigita Community Education Solution (ACES) 1.1, allows remote attackers to read arbitrary files via .%252e/ (double-encoded dot dot slash) sequences in the URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free