| Package | Affected versions | Patched versions |
|---|---|---|
| filegator/filegator | < 7.8.0 | 7.8.0 |
| filegator | < 7.8.0 | 7.8.0 |
Path Traversal in FileGator prior to 7.8.0 for non-admin users. Files created with ..\ as part of their name will be interpreted as a path. Users are thus able to add filesystem entries outside the scope of their user to their dashboard and subsequently are able to modify those files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free