CVE-2017-9088

Affected software: Flask and Werkzeug. Root cause: Directory traversal due to an inadequate filter in the Windows-specific path handling inside safe_join. Impact: Potential disclosure of arbitrary files from a server. Evidence: Veracode summary describes directory traversal vulnerability in Flask...