Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:01 a.m.•9 views

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS7AI score0.01337EPSS
SaveExploits1References1
OSV
OSV
•added 2022/07/11 1:15 a.m.•14 views

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•9 views

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
NVD
NVD
•added 2022/07/11 1:15 a.m.•14 views

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/11 12:55 a.m.•65 views

CVE-2022-31526

The CVE-2022-31526 entry concerns the ThundeRatz/ThunderDocs repository up to 2020-05-01, where an unsafe use of Flask send_file enables absolute path traversal. The vulnerability arises from improper handling of file paths, allowing a potential attacker to access files outside the intended direc...

9.3CVSS9.3AI score0.01337EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/11 12:55 a.m.•33 views

CVE-2022-31526

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.6AI score0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•5 views

CVE-2022-31526: Improper Limitation of a Pathname to a Restricted Directory

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•3 views

PT-2022-20797

Name of the Vulnerable Software and Affected Versions ThundeRatz/ThunderDocs repository versions prior to 2020-05-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-01, consider restricting...

9.3CVSS0.01337EPSS
SaveExploits1References3
Rows per page
Query Builder