| Package | Affected versions | Patched versions |
|---|---|---|
| atutor | ≤ 2.2.1 |
ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free