Lucene search
K

8 matches found

CNVD
CNVD
added 2022/07/13 12:0 a.m.14 views

chainerrl-visualizer路径遍历漏洞

chainerrl-visualizer is Chainer's open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter the resource or file path f...

9.3CVSS3.6AI score0.00432EPSS
Exploits1References1
OSV
OSV
added 2022/07/12 12:0 a.m.11 views

GHSA-687H-86VC-5X59 ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.00432EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.21 views

ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.00432EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.00432EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.2 views

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.00432EPSS
Exploits1References2
Prion
Prion
added 2022/07/11 1:15 a.m.8 views

Path traversal

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

6.4CVSS9.3AI score0.00432EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/07/11 1:1 a.m.84 views

CVE-2022-31573

CVE-2022-31573 affects the chainer/chainerrl-visualizer project (up to version 0.1.1). The vulnerability arises from unsafe use of Flask send_file, enabling absolute path traversal and potential access to arbitrary files on the server. Multiple connected sources (Red Hat, Veracode, CNVD, OSV, CNV...

9.3CVSS9.3AI score0.00432EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.1 views

chainerrl-visualizer 路径遍历漏洞

chainerrl-visualizer is Chainer's open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter the resource or file path f...

9.3CVSS5.8AI score0.00432EPSS
Exploits1References2
Rows per page
Query Builder