CVE-2022-24241 Information

Description

ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.

Reference

http://aceware.com http://aceweb.com https://www.aceware.com/forum/viewtopic.php?f=7&t=481