Skip to content
OpenAdvisories

Product · fccview

jotty

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-42564 Scanner template

    jotty·page: Unauthenticated Path Traversal leads to sensitive file disclosure and session-token reuse impact

    jotty·page is a self-hosted app for your checklists and notes. Prior to 1.22.0, an unauthenticated path traversal vulnerability exists in /api/app-icons/[filename]. The filename route parameter is joined into a filesystem path without traversal/boundary valid…

    fccview jotty