| Package | Affected versions | Patched versions |
|---|---|---|
| webwasher classic | = 2.2.1= 3.3 |
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free