CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31556

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31556

The CVE-2022-31556 entry concerns the rusyasoft/TrainEnergyServer repository (up to 2017-08-03). Affected component: Flask’s send_file usage, which is described as unsafe. Root cause: improper handling in send_file leads to absolute path traversal. Impact stated across sources: potential exposure...