| Package | Affected versions | Patched versions |
|---|---|---|
| secure file transfer | ≥ 5.0.1050, ≤ 5.1.1067≥ 6.0.1000, ≤ 6.0.1003 |
Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free