| Package | Affected versions | Patched versions |
|---|---|---|
| opensis | = 9.0 |
An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to access any student's files by visiting '/assets/studentfiles/<studentId>-<filename>'
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free