Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-24387

File upload and overwrite to app_data/Config in SmarterTrack v100.0.8019.14010

Description

With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettings.xml file. THis is possible in SmarterTrack v100.0.8019.14010

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SmarterTools SmarterTrack

  • 100.0.8019.x to < Build 8075affected

References