CVE-2022-31529

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31529

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31529

CVE-2022-31529 affects the cinemaproject/monorepo (up to 2021-03-03). The issue is an absolute path traversal caused by unsafe use of Flask send_file, as described across multiple sources. CVSS data from NVD indicates a Network attack with high impact to confidentiality and low to availability, w...