2123 matches found
CVE-2022-31576
CVE-2022-31576 involves the shackerpanel repository. The issue is an absolute path traversal flaw caused by unsafe use of Flask’s send_file function, affecting the project through 2021-05-25. The Red Hat, NVD, CVE listing and related records reiterate the same description. Impact is described as ...
CVE-2022-31575
The duducosmos/livropython repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31575
The CVE-2022-31575 entry concerns the duducosmos/livro_python repository (through 2018-06-06). The vulnerability is an absolute path traversal caused by unsafe use of Flask send_file. Impact is described by NVD CVSS metrics: CVSS v3.1 base score 9.3 (CRITICAL) with network attack vector, no privi...
CVE-2022-31574
The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31574
CVE-2022-31574 affects the repository deepaliupadhyay/RealEstate (through 2018-11-30 on GitHub). The vulnerability is a path traversal due to the unsafe use of Flask’s send_file function, enabling improper access to files outside the intended directory. Multiple connected sources (NVD, Red Hat, P...
CVE-2022-31573
The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31572
CVE-2022-31572 affects the ceee-vip/cockybook repository (through 2015-04-16) where absolute path traversal is possible due to unsafe use of Flask send_file. The issue is described as an insecure file access route that can expose files outside the intended directory. CVSS metrics in the initial r...
CVE-2022-31572
The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31571
The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31571
The CVE-2022-31571 entry concerns the akashtalole/python-flask-restful-api repository (GitHub) where an absolute path traversal is possible due to unsafe use of Flask send_file. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, PRION, CNVD, etc.), with the core iss...
CVE-2022-31570
The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31570
CVE-2022-31570 affects the adriankoczuruek/ceneo-web-scrapper repository; the vulnerability arises from unsafe use of Flask’s send_file, enabling absolute path traversal. This could allow access to arbitrary files/directories on the filesystem. Connected Red Hat and CNVD entries corroborate the p...
CVE-2022-31568
The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31568
The CVE-2022-31568 entry concerns the Rexians/rex-web project, where absolute path traversal is possible due to unsafe use of Flask send_file. This is confirmed across sources (NVD, Red Hat, CVE List, CNNVD) with descriptions indicating the vulnerability stems from improper handling of file paths...
CVE-2022-31567
The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31567
The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31567
CVE-2022-31567 affects the DSABenchmark/DSAB repository (versions up to 2.1). The root cause is unsafe use of Flask send_file, enabling absolute path traversal. Documented impact indicates potential partial confidentiality and low- to high-impact conditions (per CVSS metrics: CVSSv2 base score 6....
CVE-2022-31566
The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31566
CVE-2022-31566 : The DSAB-local/DSAB repository (up to 2019-02-18) suffers an absolute path traversal due to unsafe usage of Flask send_file, enabling access to arbitrary files on the file system. The vulnerability is reflected across multiple feeds (NVD, Red Hat, CNVD, CVE lists) with impact des...