| Package | Affected versions | Patched versions |
|---|---|---|
| steelcentral appinternals dynamic sampling agent | = 10.0.0≥ 11.0.0, < 11.8.8≥ 12.0.0, < 12.13.0 | 11.8.812.13.0 |
It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerability at the "/api/appInternals/1.0/agent/diagnostic/logs" API. The affected endpoint does not have any input validation of the user's input that allows a malicious payload to be injected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free