Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56611
HistoryJul 13, 2022 - 12:00 a.m.

DSAB path traversal vulnerability

2022-07-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
dataflow
benchmark
path traversal
flask
send_file
exploit
arbitrary files
directories
security

EPSS

0.002

Percentile

51.8%

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask send_file function to properly filter special elements in a resource or file path, which could be exploited by an attacker to access arbitrary files and directories stored on the file system.

EPSS

0.002

Percentile

51.8%

Related for CNVD-2022-56611