| Package | Affected versions | Patched versions |
|---|---|---|
| synaman | < 5.0 | 5.0 |
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free