CVE-2022-31567

The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31567

CVE-2022-31567 affects the DSABenchmark/DSAB repository (versions up to 2.1). The root cause is unsafe use of Flask send_file, enabling absolute path traversal. Documented impact indicates potential partial confidentiality and low- to high-impact conditions (per CVSS metrics: CVSSv2 base score 6....