Cpe:2.3:a:gitroom:postiz_app:*:*:*:*:*:*:*:*

Postiz fails to validate media paths during post creation, allowing users to read arbitrary files from the server disk and exfiltrate them via Discord attachments.