CVE-2022-27498

https://notcve.org/view.php?id=CVE-2022-27498

A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. Existe una vulnerabilidad de directory traversal en la funcionalidad TicketTemplateActions.aspx GetTemplateAttachment de Lansweeper lansweeper 10.1.1.0. Una solicitud HTTP especialmente manipulada puede provocar la lectura de archivos arbitrarios. • https://talosintelligence.com/vulnerability_reports/TALOS-2022-1531 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •