CVE-2022-22701: Partkeepr

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowing an authenticated user to read local files.

Affected products

• Partkeepr Partkeepr: up to and including 1.4.0

Published 2022-01-10. Last modified 2026-06-17.