10 matches found
CVE-2022-31539
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31579
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
Path traversal
The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
PT-2022-20822
Name of the Vulnerable Software and Affected Versions olmax99/pyathenastack repository through 2019-11-08 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-11-08, consider restricting access to the...
PT-2022-20833
Name of the Vulnerable Software and Affected Versions uncleYiba/photo tag repository through 2020-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the uncleYiba/photo tag repository through 2020-08-31, consider...
PT-2022-20792
Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...
PT-2022-20840
Name of the Vulnerable Software and Affected Versions DSABenchmark/DSAB repository versions through 2.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2.1, consider restricting access to the send fil...
PT-2022-20818
Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...
PT-2022-16970 · Flask +1 · Flask +1
Name of the Vulnerable Software and Affected Versions: Piano LED Visualizer versions 1.3 and prior Description: The issue concerns a path traversal attack. The os.path.join call is unsafe for use with untrusted input, as it ignores all parameters encountered before an absolute path and starts...
