OpenMF path traversal vulnerability

OpenMF is an open source mobile forensic investigation tool for the Android platform open sourced by SCoRe Lab. OpenMF has a security vulnerability in version 2022-05-03 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

Munhak-Moa path traversal vulnerability

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Syrabond path traversal vulnerability

syrabond is an MQTT-based smart home system. A security vulnerability exists in syrabond version 2020-05-25 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

VPRJ path traversal vulnerability

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Golem path traversal vulnerability

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

Harveyzyh Python path traversal vulnerability

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Krypton path traversal vulnerability

Krypton is a KryptoCurrency data relay service by Bolun Han Personal Developer. A security vulnerability exists in Krypton version 2021-06-03 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Python-Recipe-Database path traversal vulnerability

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

CVE-2022-31577: Improper Limitation of a Pathname to a Restricted Directory

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PythonWeb path traversal vulnerability

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20814

Name of the Vulnerable Software and Affected Versions mandoku/mdweb versions through 2015-05-07 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2015-05-07, consider restricting access to the send file...

PT-2022-20830

Name of the Vulnerable Software and Affected Versions tooxie/shiva-server versions 0.10.0 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.10.0 and earlier, consider restricting access to the...

PT-2022-20818

Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...

PT-2022-20833

Name of the Vulnerable Software and Affected Versions uncleYiba/photo tag repository through 2020-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the uncleYiba/photo tag repository through 2020-08-31, consider...

PT-2022-20856

Name of the Vulnerable Software and Affected Versions VideoServer versions through 2019-09-21 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-09-21, consider restricting access to the send file...

PT-2022-20804

Name of the Vulnerable Software and Affected Versions decentraminds/umbral repository through 2020-01-15 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For decentraminds/umbral repository through 2020-01-15, consider...

CVE-2022-31531: Improper Limitation of a Pathname to a Restricted Directory

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20801

Name of the Vulnerable Software and Affected Versions csm-aut/csm repository versions through 3.5 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 3.5, consider restricting access to the send file...

CVE-2022-31507: Improper Limitation of a Pathname to a Restricted Directory

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31574: Improper Limitation of a Pathname to a Restricted Directory

The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...