Critical · 9.8 CVE-2022-41217 EUVD-2022-44458GHSA-r459-f967-5328

Cloudflow - Unauthenticated file upload vulnerability

Published Feb 22, 2023 · Updated Apr 1, 2025 · Assigned by DIVD

Vendor: Hybrid Software Product: Cloudflow

Description

Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.

Affected products

Vendor	Product	Affected	Fixed
Hybrid Software	Cloudflow	< 2.3.1 – ≤ 2.3.1	—

References

https://csirt.divd.nl/CVE-2022-41217 third-party-advisory
https://csirt.divd.nl/DIVD-2022-00052 related