| Package | Affected versions | Patched versions |
|---|---|---|
| icedtea-web | = 1.8.2≤ 1.7.2 |
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free