CVE-2022-41216

HIGH

Cloudflow 2.0.0-2.3.1 - Local File Inclusion via Path Traversal

Title source: llm
STIX 2.1

Description

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory
https://csirt.divd.nl/CVE-2022-41216
Third Party Advisory related
https://csirt.divd.nl/DIVD-2022-00052

Scores

CVSS v3 8.3
EPSS 0.0062
EPSS Percentile 44.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Details

CWE
CWE-22 CWE-829
Status published
Products (1)
hybridsoftware/cloudflow 2.0.0 - 2.3.2
Published Feb 22, 2023
Tracked Since Feb 18, 2026