CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579

The CVE-2022-31579 entry involves the ralphjzhang/iasset repository (through 2022-05-04) with unsafe use of Flask’s send_file, enabling absolute path traversal. Affected component: repository code using Flask send_file; root cause: unsafe file path handling. Potential impact: absolute path traver...