| Package | Affected versions | Patched versions |
|---|---|---|
| barracudadrive web server | = 3.7.2 | |
| barracudadrive web server home server | = 3.7.2 |
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (dot), or (3) %80 and similar characters to the file name in the URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free