CVE-2023-46863 (published 2023-10-29T00:00:00)
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a