description: PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.
problem types: Local file inclusion
affected:
{
product: PartKeepr
vendor: n/a
versions:
status: affected, version: 1.4.0
}