Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56609
HistoryJul 13, 2022 - 12:00 a.m.

chainerrl-visualizer路径遍历漏洞

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.002 Low

EPSS

Percentile

62.1%

chainerrl-visualizer is Chainer’s open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask send_file function to properly filter the resource or file path for special elements in a resource or file path, which can be exploited to access arbitrary files and directories stored on the file system.

CPENameOperatorVersion
chainer chainerrl-visualizerlt0.1.1

0.002 Low

EPSS

Percentile

62.1%