4 matches found
EUVD-2022-52959
Malicious code in bioql PyPI...
9.3CVSS9.1AI score0.01432EPSS
SaveExploits1References2
CVE-2022-31501
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS7AI score0.01432EPSS
SaveExploits1References1
CVE-2022-31501
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS0.01432EPSS
SaveExploits1References2
CVE-2022-31501
The CVE-2022-31501 entry concerns the ChaoticOnyx/OnyxForum repository prior to 2022-05-04, where absolute path traversal is possible due to unsafe use of Flask’s send_file. Affected component: OnyxForum’s server-side file delivery (Flask). Root cause: improper handling in send_file usage enablin...
9.3CVSS9.2AI score0.01432EPSS
SaveExploits1References2Affected Software1
20