| Package | Affected versions | Patched versions |
|---|---|---|
| open webmail | = 1.7= 1.71= 1.8= 1.81= 1.90= 2.30 |
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free