Path traversal

2022-07-1101:15:00

PRIOn knowledge base

www.prio-n.com

path traversal

github

flask

nvd

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CPENameOperatorVersion
cockybookeq<= 2015416

CPE	Name	Operator	Version
	cockybook	eq	<= 2015416

References

github.com/github/securitylab/issues/669