| Package | Affected versions | Patched versions |
|---|---|---|
| foiaxpress public access link | ≥ 11.1.0, < 11.12.3.0 | 11.12.3.0 |
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames. There are no rate-limiting mechanisms in place.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free