| Package | Affected versions | Patched versions |
|---|---|---|
| ckfinder | < 2.5.0.1 | 2.5.0.1 |
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free