Lucene search
+L

6 matches found

CNVD
CNVD
•added 2022/07/13 12:00 a.m.•48 views

Fishtank path traversal vulnerability

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

9.3CVSS2.8AI score0.01337EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•5 views

CVE-2022-31535

The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/11 1:15 a.m.•12 views

CVE-2022-31535

The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•14 views

Fishtank 路径遍历漏洞

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•5 views

CVE-2022-31535: Improper Limitation of a Pathname to a Restricted Directory

The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•0 views

PT-2022-20806

Name of the Vulnerable Software and Affected Versions freefood89/Fishtank repository through 2015-06-24 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the freefood89/Fishtank repository through 2015-06-24, consider...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rows per page
Query Builder