CVE-2023-28458 (published 2023-04-20T00:00:00)
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a