The varijkapil13/SphereImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.3AI score0.01245EPSS
SaveExploits0References2
osv_cve•added 2022/07/11 1:15 a.m.•19 views
CVE-2022-31561
The varijkapil13/SphereImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...