3 matches found
CVE-2022-31546
The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References1
glance 路径遍历漏洞
glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...
9.3CVSS8.3AI score0.01272EPSS
SaveExploits1References2
20