Lucene search
+L

6 matches found

CNVD
CNVD
•added 2022/07/13 12:00 a.m.•55 views

ceneo-web-scrapper path traversal vulnerability

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS2.9AI score0.01211EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/11 1:15 a.m.•13 views

CVE-2022-31570

The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.8CVSS7.3AI score0.01211EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/11 1:15 a.m.•27 views

CVE-2022-31570

The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.8CVSS0.01211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•4 views

CVE-2022-31570: Improper Limitation of a Pathname to a Restricted Directory

The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.8CVSS8.2AI score0.01211EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•15 views

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

9.8CVSS5.7AI score0.01211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•4 views

PT-2022-20843

Name of the Vulnerable Software and Affected Versions adriankoczuruek/ceneo-web-scrapper versions prior to 2021-03-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-03-16, update the repository...

9.8CVSS0.01211EPSS
SaveExploits0References3
Rows per page
Query Builder