CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31563

CVE-2022-31563 affects the whmacmac/vprj repository (up to 2022-04-06). It is due to an unsafe use of Flask send_file, enabling absolute path traversal. NVD/V3.1 metrics indicate a high-severity impact with confidentiality loss (C:H) and a base score of 9.3, network attack vector, no privileges r...

CVE-2022-31562

The CVE-2022-31562 entry is linked to the waveyan/internshipsystem repository prior to 2018-05-22, where an unsafe use of Flask’s send_file enables absolute path traversal. Documented details specify that the vulnerability stems from how send_file is called, allowing traversal of the host filesys...

CVE-2022-31562

The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31561

CVE-2022-31561 affects the Sphere_ImageBackend project (varijkapil13) and is due to unsafe use of Flask’s send_file, enabling absolute path traversal. Reported for versions up to 2019-10-03. This vulnerability can allow unauthorized access to files outside the intended directory. Documented CVSS ...

CVE-2022-31561

The varijkapil13/SphereImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31560

The uncleYiba/phototag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31559

CVE-2022-31559 affects the tsileo/flask-yeoman repository (up to 2013-09-13). The vulnerability arises from unsafe use of Flask's send_file function, enabling absolute path traversal. Public details describe a path-traversal flaw that could impact confidentiality and availability (per CVSS metric...

CVE-2022-31559

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server project (GitHub) up to version 0.10.0 is affected by an absolute path traversal due to unsafe use of Flask’s send_file. This is corroborated by multiple sources (NVD, Red Hat, GHSA advisory, OSV, CVE CVE lists). Impact: potential unauthorized access to files via network ac...

CVE-2022-31557

CVE-2022-31557 involves the seveas/golem repository (up to 2016-05-17) where an unsafe use of Flask’s send_file enables absolute path traversal. The issue is documented across multiple sources, indicating a path traversal flaw in that code path. The CVSS data (2.0/3.1) suggests confidentiality im...

CVE-2022-31556

The CVE-2022-31556 entry concerns the rusyasoft/TrainEnergyServer repository (up to 2017-08-03). Affected component: Flask’s send_file usage, which is described as unsafe. Root cause: improper handling in send_file leads to absolute path traversal. Impact stated across sources: potential exposure...

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31555

The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31555

CVE-2022-31555 affects the romain20100/nursequest repo up to 2018-02-22, where absolute path traversal can occur due to unsafe use of Flask send_file. The NVD entry lists CVSS v2 base score 6.4 (Partial impact on confidentiality/availability) and CVSS v3.1 base score 9.3 (High confidentiality imp...

CVE-2022-31554

CVE-2022-31554 affects the rohitnayak/movie-review-sentiment-analysis repository on GitHub, up to 2017-05-07. The underlying issue is an unsafe use of Flask’s send_file function, enabling absolute path traversal. CVSS data available in the connected records indicate: CVSS v3.1 base score 9.3 (CRI...

CVE-2022-31553

CVE-2022-31553 affects the rainsoupah/sleep-learner repository (up to 2021-02-21). The vulnerability is caused by unsafe use of Flask's send_file, enabling absolute path traversal. NVD lists CVSSv2 base 6.4 (MEDIUM) and CVSSv3.1 base 9.3 (CRITICAL); impact includes partial confidentiality and ava...

CVE-2022-31553

The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31552

The CVE-2022-31552 entry relates to the project-anuvaad/anuvaad-corpus, where the repository up to 2020-11-23 allows absolute path traversal due to unsafe usage of Flask send_file. Multiple connected sources (Red Hat, CNVD, CVE databases, CNVD, PRION, etc.) describe the vulnerability as a path tr...