CVE-2022-31534

CVE-2022-31534 affects the echoleegroup/PythonWeb repository up to 2018-10-31. The issue is an absolute path traversal caused by unsafe use of Flask’s send_file, enabling an attacker to access files outside the intended directory. The Red Hat/NVD entries substantiate the same description. No expl...