CVE-2022-31525

The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31525

The CVE-2022-31525 issue affects the SummaLabs/DLS repository up to version 0.1.0, where an unsafe use of Flask’s send_file enables absolute path traversal. The available connected sources consistently describe this vulnerability class and attribute the flaw to improper handling of file serving, ...