| Package | Affected versions | Patched versions |
|---|---|---|
| ajenti-panel | < 2.2.15 | 2.2.15 |
| ajenti | < 2.2.15 | 2.2.15 |
An authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser.
This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free