| Package | Affected versions | Patched versions |
|---|---|---|
| agiloft | ≥ 19, < 31 | 31 |
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free