CVE-2022-31554

The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31554

CVE-2022-31554 affects the rohitnayak/movie-review-sentiment-analysis repository on GitHub, up to 2017-05-07. The underlying issue is an unsafe use of Flask’s send_file function, enabling absolute path traversal. CVSS data available in the connected records indicate: CVSS v3.1 base score 9.3 (CRI...