Jotty
Monthly
Arbitrary file read in Jotty (fccview's self-hosted checklist and notes app) lets unauthenticated remote attackers escape the app-icons directory. Versions before 1.22.0 pass the filename route parameter of /api/app-icons/[filename] directly into a filesystem path without boundary validation, so crafted traversal sequences read files outside data/uploads/app-icons/. No public exploit identified at time of analysis and EPSS is low (0.05%), but the flaw is network-reachable with no authentication and is trivially automatable.
Arbitrary file read in Jotty (fccview's self-hosted checklist and notes app) lets unauthenticated remote attackers escape the app-icons directory. Versions before 1.22.0 pass the filename route parameter of /api/app-icons/[filename] directly into a filesystem path without boundary validation, so crafted traversal sequences read files outside data/uploads/app-icons/. No public exploit identified at time of analysis and EPSS is low (0.05%), but the flaw is network-reachable with no authentication and is trivially automatable.