| Package | Affected versions | Patched versions |
|---|---|---|
| cantata | = 0.7.0= 0.7.1= 0.8.0= 0.8.1= 0.8.2= 0.8.3= 0.8.3.1= 0.9.0= 0.9.1= 0.9.2= 1.0.0= 1.0.1= 1.0.2= 1.0.3= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.2.0≤ 1.2.1 |
Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free