Critical severity9.8NVD Advisory· Published Feb 22, 2023· Updated Jun 17, 2026

CVE-2022-41217

Description

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.

Affected products

Cloudflow/CLOUDFLOW PROOFSCOPEllm-create
Hybrid Software/Cloudflowv5
Range: < 2.3.1

Patches

Vulnerability mechanics

References

csirt.divd.nl/CVE-2022-41217nvdThird Party Advisory
csirt.divd.nl/DIVD-2022-00052nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000