CVE-2022-31548

CVE-2022-31548 affects the nrlakin/homepage repository up to 2017-03-06. The root cause is unsafe use of Flask’s send_file, enabling absolute path traversal. This leads to potential unauthorized access to files outside the intended directory, as described across Red Hat and CVE/NVD records. Publi...

CVE-2022-31547

The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31547

The CVE-2022-31547 entry concerns the noamezekiel/sphere repository (up to 2020-05-31) where Flask’s send_file is used unsafely, enabling absolute path traversal. Red Hat and other feeds corroborate the flaw in sphere, with vulnerability described as an absolute path traversal due to unsafe send_...

CVE-2022-31546

Affected software: nlpweb/glance repository (GitHub) up to 2014-06-27. Vulnerability: absolute path traversal due to unsafe usage of Flask send_file. Impact: potential exposure of sensitive server files; practical consequences stated as absolute path traversal. Evidence: CVE-2022-31546 entries fr...

CVE-2022-31546

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The CVE-2022-31544 entry concerns the meerstein/rbtm repository (up to version 1.5) where an unsafe use of Flask’s send_file enables absolute path traversal. The vulnerability is triggered by improper handling of file paths in the server’s response logic, exposing potential access to sensitive fi...

CVE-2022-31543

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31543

CVE-2022-31543 affects the maxtortime/SetupBox repository up to version 1.0. The root cause is unsafe use of Flask’s send_file, enabling absolute path traversal. The vulnerability is described across multiple connected records (Red Hat, NVD, Veracode, OSV, CVE lists) as a path-traversal flaw in S...

CVE-2022-31543

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31542

CVE-2022-31542 affects the mandoku/mdweb repository (pre-2015-05-07) where an unsafe use of Flask's send_file enables absolute path traversal. The issue is confirmed across multiple connected sources (NVD, Red Hat, CVE lists, CNNVD) describing the root cause as improper handling of file paths in ...

CVE-2022-31542

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31540

CVE-2022-31540 affects the kumardeepak/hin-eng-preprocessing repository, wherein an unsafe use of Flask’s send_file through 2019-07-16 enables absolute path traversal. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with CVSS metrics indicating a high impact on confident...

CVE-2022-31540

The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31539

The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31539

The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31539

The CVE-2022-31539 entry applies to the kotekan/kotekan repository up to version 2021.11 on GitHub, where Flask’s send_file is used unsafely. This creates an absolute path traversal vulnerability in file serving, according to Red Hat, NVD/NVD-derived records, OSV, CVE list, and related sources in...

CVE-2022-31538

The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31538

CVE-2022-31538 affects the repository joaopedro-fg/mp-m08-interface (up to 2020-12-10 on GitHub). The underlying issue is an absolute path traversal caused by unsafe use of Flask’s send_file function. Multiple connected sources (Red Hat advisory, CVE listings, CNNVD/CVE records) confirm the same ...

CVE-2022-31537

The CVE-2022-31537 issue affects the Solar-system-simulator project by jmcginty15 (GitHub), with vulnerability described as absolute path traversal caused by an unsafe use of Flask’s send_file function in versions up to 2021-07-26. The Red Hat entry reiterates the same: unsafe send_file use enabl...