CVE-2022-27192
The Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files.
Date published : 2022-03-23
https://github.com/transcendent-group/advisories/blob/main/CVE-2022-27192.md
https://lt.asseco.com/sprendimai/dokumentu-valdymas/dvs-avilys/