2472 matches found
CVE-2022-31543
CVE-2022-31543 affects the maxtortime/SetupBox repository up to version 1.0. The root cause is unsafe use of Flask’s send_file, enabling absolute path traversal. The vulnerability is described across multiple connected records (Red Hat, NVD, Veracode, OSV, CVE lists) as a path-traversal flaw in S...
CVE-2022-31543
The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31542
CVE-2022-31542 affects the mandoku/mdweb repository (pre-2015-05-07) where an unsafe use of Flask's send_file enables absolute path traversal. The issue is confirmed across multiple connected sources (NVD, Red Hat, CVE lists, CNNVD) describing the root cause as improper handling of file paths in ...
CVE-2022-31542
The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31541
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31541
The CVE-2022-31541 entry concerns the Barry-Voice-Assistant project (GitHub) where absolute path traversal is possible due to unsafe use of Flask’s send_file. The Red Hat, CNVD, CNVD-like entries align with this description, identifying the issue as a path traversal vulnerability in Barry-Voice-A...
CVE-2022-31540
The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31540
CVE-2022-31540 affects the kumardeepak/hin-eng-preprocessing repository, wherein an unsafe use of Flask’s send_file through 2019-07-16 enables absolute path traversal. The issue is documented across multiple sources (NVD, Red Hat, CVE lists) with CVSS metrics indicating a high impact on confident...
CVE-2022-31539
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31539
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31539
The CVE-2022-31539 entry applies to the kotekan/kotekan repository up to version 2021.11 on GitHub, where Flask’s send_file is used unsafely. This creates an absolute path traversal vulnerability in file serving, according to Red Hat, NVD/NVD-derived records, OSV, CVE list, and related sources in...
CVE-2022-31538
The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31538
CVE-2022-31538 affects the repository joaopedro-fg/mp-m08-interface (up to 2020-12-10 on GitHub). The underlying issue is an absolute path traversal caused by unsafe use of Flask’s send_file function. Multiple connected sources (Red Hat advisory, CVE listings, CNNVD/CVE records) confirm the same ...
CVE-2022-31537
The CVE-2022-31537 issue affects the Solar-system-simulator project by jmcginty15 (GitHub), with vulnerability described as absolute path traversal caused by an unsafe use of Flask’s send_file function in versions up to 2021-07-26. The Red Hat entry reiterates the same: unsafe send_file use enabl...
CVE-2022-31537
The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31536
The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31536
CVE-2022-31536 affects the repository by jaygarza1982/ytdl-sync up to 2021-01-02, where an unsafe use of Flask’s send_file enables absolute path traversal. Documented impact includes partial confidentiality/partial availability (CVSS v3.1 base score 9.3; network attack, no privileges, no user int...
CVE-2022-31535
The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31535
CVE-2022-31535 affects the freefood89/Fishtank repository (up to 2015-06-24). The root cause is an unsafe use of Flask’s send_file, which fails to properly filter special elements in resource/file paths, enabling absolute path traversal. As described across multiple sources, this can allow an att...