| Package | Affected versions | Patched versions |
|---|---|---|
| avalanche | < 6.4.1 | 6.4.1 |
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free