| Package | Affected versions | Patched versions |
|---|---|---|
| openproject | < 16.6.2 | 16.6.2 |
OpenProject is an open-source, web-based project management software. For OpenProject version 16.6.1 and below, a registered administrator can execute arbitrary command by configuring sendmail binary path and sending a test email. This issue has been patched in version 16.6.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free