Lucene search
+L

7 matches found

osv_pysec
osv_pysec
•added 2026/07/07 11:45 a.m.•22 views

PYSEC-2026-1387 Path traversal in flaskcode

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS7.3AI score0.00718EPSS
SaveExploits0References4
PyPA
PyPA
•added 2026/07/07 11:45 a.m.•30 views

Path traversal in flaskcode

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS7.4AI score0.00718EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/01/13 6:30 a.m.•62 views

GHSA-V3RG-QM46-XRG9 Path traversal in flaskcode

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS6AI score0.00718EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/13 4:15 a.m.•35 views

Directory traversal

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

5CVSS7.3AI score0.00718EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/13 12:00 a.m.•6 views

CVE-2023-52289: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS7.3AI score0.00718EPSS
SaveExploits0References3
Mend
Mend
•added 2024/01/13 12:00 a.m.•9 views

CVE-2023-52289

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

8.7CVSS0.00718EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•25 views

PT-2024-14506

Name of the Vulnerable Software and Affected Versions flaskcode versions through 0.0.8 Description An issue was discovered that allows for unauthenticated directory traversal, which can be exploited with a POST request to the "/update-resource-data/" API endpoint. This enables attackers to write ...

7.5CVSS7.2AI score0.00718EPSS
SaveExploits0References8
Rows per page
Query Builder