CVE-2022-38794

Zaver (through 2020-12-15) is vulnerable to Local File Inclusion via the GET /.. substring. The connected Nuclei template confirms the flaw as a local file inclusion issue, enabling potential unauthorized access and data leakage. Impact details in the template mention possible remote code executi...