| Package | Affected versions | Patched versions |
|---|---|---|
| creabox manager | = 4.4.4 |
Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free