CVE-2022-31574

CVE-2022-31574 affects the repository deepaliupadhyay/RealEstate (through 2018-11-30 on GitHub). The vulnerability is a path traversal due to the unsafe use of Flask’s send_file function, enabling improper access to files outside the intended directory. Multiple connected sources (NVD, Red Hat, P...

CVE-2022-31574

The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20847

Name of the Vulnerable Software and Affected Versions deepaliupadhyay/RealEstate repository through 2018-11-30 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the deepaliupadhyay/RealEstate repository through...

CVE-2022-31574: Improper Limitation of a Pathname to a Restricted Directory

The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...