PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the ‘file://’ URI scheme, allowing an authenticated user to read local files.
[
{
"product": "PartKeepr",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "1.4.0"
}
]
}
]