CVE-2020-25032: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...