Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56598
HistoryJul 13, 2022 - 12:00 a.m.

Anakin path traversal vulnerability

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
16

0.002 Low

EPSS

Percentile

62.0%

Anakin is a cross-platform, high-performance inference engine open-sourced by PaddlePaddle.Anakin 0.1.1 and earlier versions have a path traversal vulnerability that stems from a failure of Flask’s send_file function to properly filter special elements in resource or file paths, which could be exploited to access arbitrary files and directories stored on the file system. directories stored on the file system.

CPENameOperatorVersion
paddlepaddle anakinlt0.1.1

0.002 Low

EPSS

Percentile

62.0%

Related for CNVD-2022-56598