CVE-2022-22701

Publication date

2022-01-07 21:59:38

Family

Fluid Attacks

State

PUBLISHED

Description

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the file:// URI scheme, allowing an authenticated user to read local files.