CVE-2022-24241

Publication date

2022-05-27 18:29:37

Family

mitre

State

PUBLISHED

Description

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.