| Package | Affected versions | Patched versions |
|---|---|---|
| kiteworks | < 9.5.1 | 9.5.1 |
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance when the notification was next sent.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free