2466 matches found
Security update for python-Flask-Cors (moderate)
openSUSE Security Update: Security update for python-Flask-Cors Announcement ID: openSUSE-SU-2020:1423-1 Rating: moderate References: 1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: Thi...
OPENSUSE-SU-2020:1446-1 Security update for python-Flask-Cors
This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. This update was imported from the openSUSE:Leap:15.2:Update update project...
Fedora 31 : python-flask-cors (2020-863fc5c796)
Update to 3.0.9 - Force tests to pass Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...
Fedora: Security Advisory for python-flask-cors (FEDORA-2020-863fc5c796)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 31 Update: python-flask-cors-3.0.9-1.fc31
A Flask extension for handling Cross Origin Resource Sharing CORS, making cross-origin AJAX possible...
OPENSUSE-SU-2020:1423-1 Security update for python-Flask-Cors
This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. This update was imported from the openSUSE:Leap:15.2:Update update project...
vulhub
It is an offensive tool for Docker environments. The repository contains pre-built vulnerable environments based on Docker-Compose, allowing users to easily set up and test various vulnerabilities. The tool is designed to be user-friendly, requiring no prior knowledge of Docker, and can be...
OPENSUSE-SU-2020:1415-1 Security update for python-Flask-Cors
This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. This update was imported from the openSUSE:Leap:15.1:Update update project...
Security update for python-Flask-Cors (moderate)
openSUSE Security Update: Security update for python-Flask-Cors Announcement ID: openSUSE-SU-2020:1415-1 Rating: moderate References: 1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: Thi...
openSUSE Security Update : python-Flask-Cors (openSUSE-2020-1393)
This update for python-Flask-Cors fixes the following issues : - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1393. Th...
openSUSE: Security Advisory for python-Flask-Cors (openSUSE-SU-2020:1393-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1393-1 Security update for python-Flask-Cors
This update for python-Flask-Cors fixes the following issues: - CVE-2020-25032: fix a relative directory traversal vulnerability bsc1175986...
Security update for python-Flask-Cors (moderate)
openSUSE Security Update: Security update for python-Flask-Cors Announcement ID: openSUSE-SU-2020:1393-1 Rating: moderate References: 1175986 Cross-References: CVE-2020-25032 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 An update that fixes one vulnerability is now available...
CVE-2020-25032
A flaw was found in Flask-CORS aka CORS Middleware for Flask. This issue allows the ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format. The highest threat from this vulnerability is to confidentiality...
LOLBITS v2.0.0 - C2 Framework That Uses Background Intelligent Transfer Service (BITS) As Communication Protocol And Direct Syscalls + Dinvoke For EDR User-Mode Hooking Evasion
LOLBITS is a C2 framework that uses Microsoft's Background Intelligent Transfer Service BITS to establish the communication channel between the compromised host and the backend. The C2 backend is hidden behind an apparently harmless flask web application and it's only accesible when the HTTP...
CVE-2020-25032
An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...
CVE-2020-25032
An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...
DEBIAN-CVE-2020-25032
An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...
ag-llama-api (>=0.0.1 <=0.0.31), ag-llama-api-s (>=0.0.4 <=0.0.12) +403 more potentially affected by CVE-2020-25032 via flask-cors (>=1.1.2 <=3.0.8)
flask-cors PYPI version =1.1.2, =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =0.4.0, =0.1.0, =1.0.1, =0.14.0, =0.15.3 - amundsen-databuilder =5.1.0 and more Source cves: CVE-2020-25032 Source advisory: OSV:PYSEC-2020-43...
PYSEC-2020-43
An issue was discovered in Flask-CORS aka CORS Middleware for Flask before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format...