| Package | Affected versions | Patched versions |
|---|---|---|
| website professional | ≤ 2.5.4 |
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free