CVE-2022-31554

2022-07-1100:59:10

mitre

www.cve.org

github

path traversal

flask

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

References

github.com/github/securitylab/issues/669#issuecomment-1117265726