| Package | Affected versions | Patched versions |
|---|---|---|
| kiteworks | < 9.5.1 | 9.5.1 |
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free