| Package | Affected versions | Patched versions |
|---|---|---|
| bes | ≤ 3.4.2 | |
| hyrax | = 1.2 |
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free