CVE-2022-22701
Assigner: Fluid Attacks
Published: 2022-01-07T21:59:38
State: PUBLISHED
affected: product: PartKeepr
vendor: n/a
versions: status: affected
version: 1.4.0
descriptions: value: PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.
problemTypes: descriptions: description: Local file inclusion
type: text