| Package | Affected versions | Patched versions |
|---|---|---|
| jspwiki | = 2.4.104= 2.5.139= 2.5.139_beta |
Directory traversal vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to include and execute arbitrary local .jsp files, and obtain sensitive information, via a .. (dot dot) in the editor parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free