← Database

CVE-2022-24241

HIGH CVSS: 7.5 Published: 2022-06-02 Modified: 2026-07-09

Description

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.

Affected Platforms

Aceware Aceweb Online Portal

Weakness Type

CWE-610

References