← Database

CVE-2022-22701

MEDIUM CVSS: 6.5 Published: 2022-01-10 Modified: 2026-06-17

Description

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.

Affected Platforms

Partkeepr Partkeepr

Weakness Type

CWE-200

References