CVE-2023-28459 (published 2023-04-20T00:00:00)
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a