CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31578

The CVE-2022-31578 issue affects the piaoyunsoft/bt_lnmp repository (GitHub) where unsafe use of Flask send_file enables absolute path traversal. The root cause is improper filtering of path elements, allowing an attacker to access arbitrary files and directories on the host filesystem. Affected ...