3 matches found
CVE-2022-31534
The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
CVE-2022-31534: Improper Limitation of a Pathname to a Restricted Directory
The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
PT-2022-20805
Name of the Vulnerable Software and Affected Versions echoleegroup/PythonWeb repository through 2018-10-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the echoleegroup/PythonWeb repository through 2018-10-31,...
9.3CVSS0.01337EPSS
SaveExploits1References3
20