CVE-2022-38485: Agevolt

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authenticated attacker could leverage this vulnerability to read files from any location on the target operating system with web server privileges.

Affected products

• Agevolt Agevolt: before 0.1 (fixed in 0.1)

Published 2023-10-25. Last modified 2026-06-17.