CVE-2022-31572

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31572

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31572

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31572

CVE-2022-31572 affects the ceee-vip/cockybook repository (through 2015-04-16) where absolute path traversal is possible due to unsafe use of Flask send_file. The issue is described as an insecure file access route that can expose files outside the intended directory. CVSS metrics in the initial r...

CVE-2022-31572

The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20845

Name of the Vulnerable Software and Affected Versions ceee-vip/cockybook versions prior to 2015-04-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2015-04-16, consider restricting access to the se...