Lucene search
+L

5 matches found

attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•10 views

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
Mend
Mend
•added 2022/07/11 1:00 a.m.•5 views

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/11 1:00 a.m.•472 views

CVE-2022-31571

The CVE-2022-31571 entry concerns the akashtalole/python-flask-restful-api repository (GitHub) where an absolute path traversal is possible due to unsafe use of Flask send_file. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, PRION, CNVD, etc.), with the core iss...

9.3CVSS9.3AI score0.01337EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•6 views

CVE-2022-31571: Improper Limitation of a Pathname to a Restricted Directory

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•5 views

PT-2022-20844

Name of the Vulnerable Software and Affected Versions akashtalole/python-flask-restful-api repository through 2019-09-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rows per page
Query Builder