| Package | Affected versions | Patched versions |
|---|---|---|
| roothub | = 2.5.0 |
Roothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free