| Package | Affected versions | Patched versions |
|---|---|---|
| openedge | ≥ 11.7, < 11.7.18≥ 12.2, < 12.2.13 | 11.7.1812.2.13 |
| openedge innovation | < 12.8.0 | 12.8.0 |
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free