PT-2022-20838

Name of the Vulnerable Software and Affected Versions yogson/syrabond versions prior to 2020-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-25, update to a version that safely uses the...

CVE-2022-31529: Improper Limitation of a Pathname to a Restricted Directory

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546: Improper Limitation of a Pathname to a Restricted Directory

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

rbtm Path Traversal Vulnerability

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

CVE-2022-31545: Improper Limitation of a Pathname to a Restricted Directory

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31578: Improper Limitation of a Pathname to a Restricted Directory

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Kotekan path traversal vulnerability

kotekan is a high performance radio data processing pipeline from kotekan open source. A security vulnerability exists in kotekan version 2021.11 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20840

Name of the Vulnerable Software and Affected Versions DSABenchmark/DSAB repository versions through 2.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2.1, consider restricting access to the send fil...

CVE-2022-31586: Improper Limitation of a Pathname to a Restricted Directory

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20808

Name of the Vulnerable Software and Affected Versions jmcginty15/Solar-system-simulator versions prior to 2021-07-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-07-26, consider restricting...

PT-2022-20806

Name of the Vulnerable Software and Affected Versions freefood89/Fishtank repository through 2015-06-24 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the freefood89/Fishtank repository through 2015-06-24, consider...

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

PT-2022-20772 · Orchest · Orchest

Name of the Vulnerable Software and Affected Versions: orchest/orchest versions prior to 2022.05.0 Description: The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations: For versions prior to 2022.05.0, update to version 2022.05.0 or later to...

CVE-2022-31503: Improper Limitation of a Pathname to a Restricted Directory

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31583: Improper Limitation of a Pathname to a Restricted Directory

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582: Improper Limitation of a Pathname to a Restricted Directory

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31581: Improper Limitation of a Pathname to a Restricted Directory

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31580: Improper Limitation of a Pathname to a Restricted Directory

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31554: Improper Limitation of a Pathname to a Restricted Directory

The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31537: Improper Limitation of a Pathname to a Restricted Directory

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...