| Package | Affected versions | Patched versions |
|---|---|---|
| goahead | = 3.0.0= 3.3.1= 3.3.2= 3.3.3= 3.3.4= 3.3.5= 3.3.6= 3.4.0 |
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free