CVE-2022-24241

Vulnerability

ACEweb Online Portal version 3.5.065 is vulnerable to an External Controlled File Path and Name (path traversal) in the attachments.awp script. The txtFilePath parameter does not properly sanitize user input, allowing an attacker to specify arbitrary file paths.

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the attachments.awp endpoint with a malicious txtFilePath parameter. No authentication is required. The attacker can specify paths like ../../../etc/passwd to read sensitive files or potentially write files.

Impact

Successful exploitation could allow an attacker to read or write arbitrary files on the server, leading to information disclosure, data modification, or potentially remote code execution depending on the files accessed.

Mitigation

No official fix or patched version has been disclosed in the available references. Affected users should monitor vendor updates and consider restricting access to attachments.awp or applying input validation if possible.