| Package | Affected versions | Patched versions |
|---|---|---|
| org.wso2.carbon.commons:org.wso2.carbon.logging.view.ui | ≤ 4.4.5 | |
| carbon | = 4.4.5 |
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free