CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

EUVD-2022-52971

Malicious code in bioql PyPI...

CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31515

The CVE describes a path traversal vulnerability in the Delor4/CarceresBE repository (through version 1.0) where Flask’s send_file is used unsafely, allowing an attacker to access arbitrary files on the filesystem. Affected component: CarceresBE (backend) built with Flask; root cause is improper ...

CVE-2022-31515

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20785

Name of the Vulnerable Software and Affected Versions Delor4/CarceresBE version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider updating the Flask send file function usage to prevent...

CVE-2022-31515: Improper Limitation of a Pathname to a Restricted Directory

The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...