| Package | Affected versions | Patched versions |
|---|---|---|
| risk value | ≤ 2.8.0 |
Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do not have permission to view.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free