← Database

CVE-2022-46309

MEDIUM CVSS: 6.5 Published: 2023-01-03 Modified: 2026-06-17

Description

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.

Affected Platforms

Vitalsesp Vitals Esp

Weakness Type

CWE-22, CWE-22

References