| Package | Affected versions | Patched versions |
|---|---|---|
| powershell universal | ≥ 3.0.0, < 3.4.7≥ 3.5.0, < 3.5.3 | 3.4.73.5.3 |
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the configuration directory via a crafted HTTP request to particular endpoints in the web server. Patched Versions are 3.5.3 and 3.4.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free