| Package | Affected versions | Patched versions |
|---|---|---|
| mik.starlight | = 7.9.5.24363 |
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free