| Package | Affected versions | Patched versions |
|---|---|---|
| qsnapper | < 1.3.3 | 1.3.3 |
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free