CVE-2022-2653

CVE-2022-2653 is a path traversal vulnerability affecting Planka, allowing authenticated attackers to read sensitive files such as configuration files and environment variables, potentially exposing database credentials. If the web server runs as root, an attacker could read any file on the system. Rated 6.5 MEDIUM, it has a low attack complexity and requires low privileges but can lead to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.