CVE-2022-41217 — Cloudflow - Unauthenticated file upload vulnerability

CVE-2022-41217

Cloudflow - Unauthenticated file upload vulnerability PUBLISHED

Description (CNA)

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.

Affected (CNA)

Vendor / product	Versions
Hybrid Software / Cloudflow	affected < 2.3.1 through 2.3.1

CWE

CWE-434

References

https://csirt.divd.nl/CVE-2022-41217
https://csirt.divd.nl/DIVD-2022-00052

ADP enrichment

CVE

No English description supplied.

https://csirt.divd.nl/CVE-2022-41217
https://csirt.divd.nl/DIVD-2022-00052

CISA-ADP

No English description supplied.

No references supplied.