CVE-2022-32573

Name of the Vulnerable Software and Affected Versions Lansweeper version 10.1.1.0

Description A directory traversal issue exists in the AssetActions.aspx addDoc functionality. This can be triggered by a specially-crafted HTTP request, potentially leading to arbitrary file upload. An attacker can exploit this by sending a crafted HTTP request.

Recommendations For Lansweeper version 10.1.1.0, as a temporary workaround, consider restricting access to the AssetActions.aspx page until a patch is available. Avoid using the addDoc functionality in the AssetActions.aspx page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.