< 0.3.5
0.3.5
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.