CVE-2022-28052

The CVE-2022-28052 entry describes a directory traversal vulnerability in Roothub 2.6.0, specifically in the FileSystemStorageService.store function. An attacker with low privileges can exploit the /common/upload API to upload arbitrary files, potentially leading to remote code execution. The aff...