Cloudflow Security Vulnerabilities

CVE-2022-41216

Local File Inclusion vulnerability within Cloudflow allows attackers to retrieve confidential information from the system.

CVE-2022-41217

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.