| Package | Affected versions | Patched versions |
|---|---|---|
| chandler server | ≤ 0.10 |
The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbitrary resources in another user's home collection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free