| Package | Affected versions | Patched versions |
|---|---|---|
| core | ≤ 41edf92 |
In RACTF before commit f3dc89b, unauthenticated users are able to get the value of sensitive config keys that would normally be hidden to everyone except admins. All versions after commit f3dc89b9f6ab1544a289b3efc06699b13d63e0bd(3/10/20) are patched.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free