| Package | Affected versions | Patched versions |
|---|---|---|
| cobalt strike | < 4.5 | 4.5 |
CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free