CVE-2022-31559

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31559

CVE-2022-31559 affects the tsileo/flask-yeoman repository (up to 2013-09-13). The vulnerability arises from unsafe use of Flask's send_file function, enabling absolute path traversal. Public details describe a path-traversal flaw that could impact confidentiality and availability (per CVSS metric...