| Package | Affected versions | Patched versions |
|---|---|---|
| development system | < 3.5.22.20 | 3.5.22.20 |
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the components to be installed, enabling local privilege escalation by forcing the deployment of arbitrary components.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free