2123 matches found
CVE-2022-31588
CVE-2022-31588 describes an absolute path traversal flaw in the zippies/testplatform repository (pre-2016-07-19) caused by unsafe use of Flask’s send_file function. The vulnerability arises from how file paths are handled, enabling an attacker to access arbitrary files on the server. Public refer...
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31587
CVE-2022-31587 affects the yuriyouzhou/KG-fashion-chatbot repository (up to 2018-05-22). The issue is an absolute path traversal caused by unsafe use of Flask’s send_file, enabling access to unintended files. CVSS data in the provided sources indicate a high impact on confidentiality and a signif...
CVE-2022-31587
The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31586
The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31586
CVE-2022-31586 affects the unizar-30226-2019-06/ChangePop-Back repository. The root cause is unsafe handling of Flask’s send_file, enabling absolute path traversal through 2019-06-04 and earlier code. Connected docs (Red Hat, NVD/CVE pages, CVE lists, CNNVD) corroborate the vulnerability descript...
CVE-2022-31585
CVE-2022-31585 concerns the umeshpatil-dev/Home__internet repository (through 2020-08-28) where absolute path traversal is possible due to unsafe usage of Flask's send_file. Connected feeds (Red Hat, NVD, CVE lists, CNNVD, PRION, etc.) reiterate the issue as an absolute path traversal vulnerabili...
CVE-2022-31584
The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31584
The CVE-2022-31584 entry concerns the stonethree/s3label repository (GitHub) up to 2019-08-14, where absolute path traversal is possible due to unsafe use of Flask’s send_file. Connected sources corroborate it as a path traversal vulnerability in the file-serving logic, with no explicit remediati...
CVE-2022-31583
The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31583
The CVE-2022-31583 entry documents a path-traversal vulnerability in the sravaniboinepelli/AutomatedQuizEval repository (through 2020-04-27). The root cause is unsafe use of Flask’s send_file, which allows absolute path traversal and potential access to arbitrary files/directories on the file sys...
CVE-2022-31581
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31580
The CVE-2022-31580 case applies to the caretakerr-api Flask API (Sanoj Tharindu) and is caused by unsafe usage of Flask’s send_file, enabling absolute path traversal. Affected as of 2021-05-17 and earlier builds of caretakerr-api, the vulnerability allows an attacker to access arbitrary files on ...
CVE-2022-31580
The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31579
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31578
The CVE-2022-31578 issue affects the piaoyunsoft/bt_lnmp repository (GitHub) where unsafe use of Flask send_file enables absolute path traversal. The root cause is improper filtering of path elements, allowing an attacker to access arbitrary files and directories on the host filesystem. Affected ...
CVE-2022-31578
The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31577
The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31577
The CVE-2022-31577 entry concerns an absolute path traversal in the longmaoteamtf/audio_aligner_app repository (up to 2020-01-10). The vulnerability arises from unsafe use of Flask’s send_file, which can fail to filter resources or file paths, allowing attackers to access arbitrary files and dire...