Lucene search

K
osvGoogleOSV:CVE-2022-31558
HistoryJul 11, 2022 - 1:15 a.m.

CVE-2022-31558

2022-07-1101:15:10
Google
osv.dev
2

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

Related for OSV:CVE-2022-31558