| Package | Affected versions | Patched versions |
|---|---|---|
| pyblosxom | = 1.2.1= 1.3≤ 1.3.1 |
PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free