| Package | Affected versions | Patched versions |
|---|---|---|
| avalanche | < 6.4.7 | 6.4.7 |
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free