pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRET_KEY
variable. This issue has been patched in version 0.5.0b3.dev77.
CPE | Name | Operator | Version |
---|---|---|---|
pyload | le | 0.4.9 | |
pyload | eq | 0.5.0 beta1 | |
pyload | eq | 0.5.0 beta2 |