CVE-2022-23167

Published: 2022-06-13T17:15Z

Last Modified: 2024-11-21T06:48Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Attacker crafts a GET request to: /mobile/downloadfile.aspx? Filename =../.. /windows/boot.ini the LFI is UNAUTHENTICATED. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt