CVE-2022-23377: Keep Archeevo

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

Archeevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an attacker to retrieve local files.

Affected products

• Keep Archeevo: before 5.0 (fixed in 5.0)

Published 2022-03-01. Last modified 2026-06-17.