CVE-2022-31528

The CVE-2022-31528 entry concerns the bonn-activity-maps/bam_annotation_tool repository. Concrete details from connected sources show a path traversal vulnerability caused by unsafe handling of file paths in Flask’s send_file function, affecting versions up to 2021-08-31. The issue enables an att...

CVE-2022-31528: Improper Limitation of a Pathname to a Restricted Directory

The bonn-activity-maps/bamannotationtool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...