| Package | Affected versions | Patched versions |
|---|---|---|
| scrutisweb | ≤ 2.1.37 |
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free