CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

CVE-2022-28462

CVE-2022-28462 affects novel-plus 3.6.0 with an Arbitrary file reading vulnerability caused by lack of restrictions on file parameters. NVD CVSSv3.1 base score 7.5 (HIGH) with network access and no privileges required; confidentiality impact HIGH. PT-Security notes no available fix as of their en...