446 matches found
CVE-2022-31523
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31523
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
Path traversal
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31523
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31523
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31523
The CVE-2022-31523 vulnerability affects the PaddlePaddle/Anakin repository up to version 0.1.1, where an absolute path traversal flaw exists because Flask send_file is used unsafely. The root cause is improper filtering of path elements in resource/file paths, which could allow an attacker to ac...