Lucene search
+L

4 matches found

OSV
OSV
•added 2022/07/11 1:15 a.m.•14 views

CVE-2022-31566

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

8.6CVSS5.8AI score0.01199EPSS
SaveExploits0References1
Mend
Mend
•added 2022/07/11 1:00 a.m.•2 views

CVE-2022-31566

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.2CVSS0.01199EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•6 views

CVE-2022-31566: Improper Limitation of a Pathname to a Restricted Directory

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

8.6CVSS7.8AI score0.01199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•3 views

PT-2022-20839

Name of the Vulnerable Software and Affected Versions DSAB-local/DSAB repository versions prior to 2019-02-18 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2019-02-18, consider restricting access t...

8.6CVSS0.01199EPSS
SaveExploits0References3
Rows per page
Query Builder