Lucene search

K
cvelistMitreCVELIST:CVE-2022-31502
HistoryJul 11, 2022 - 12:53 a.m.

CVE-2022-31502

2022-07-1100:53:39
mitre
www.cve.org
5
operatorequals/wormnest
repository
github
absolute path traversal
flask
unsafely

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

54.6%

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

54.6%

Related for CVELIST:CVE-2022-31502