CVE-2022-24241

—

CVSS 3.1

7.5 high

EPSS

<1%p59

Published

Jun 2, 2022 (Jun 2, 2022)

Modified

Jul 9, 2026

Description

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.

Vendors: aceware
Products: aceweb online portal
Weakness: CWE-610
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.