Fan_Platform path traversal vulnerability

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

CVE-2022-31514

The Caoyongqi912/FanPlatform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31514

CVE-2022-31514 affects the Caoyongqi912/Fan_Platform repository on GitHub up to 2021-04-20, where an absolute path traversal flaw exists due to unsafe use of Flask’s send_file. The vulnerability targets the backend of Fan_Platform, a UI automation platform, by failing to filter file paths, enabli...