CVE-2022-23377

Description

Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.

Affected Platforms

Weakness Type

CWE-552

References

• https://www.exploit-db.com/exploits/50665
• https://www.exploit-db.com/exploits/50665