3162 matches found
CVE-2022-31513
The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31512
The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31512
CVE-2022-31512 affects the Atom02/flask-mvc repository up to 2020-09-14, where an unsafe use of Flask’s send_file enables absolute path traversal. This can allow a remote attacker to view arbitrary files or cause a denial of service. The vulnerability is confirmed across multiple sources (NVD, Re...
CVE-2022-31511
CVE-2022-31511 affects the AFDudley/equanimity repository (up to 2014-04-23). The root cause is unsafe use of Flask’s send_file, enabling absolute path traversal. This could let an attacker access arbitrary files/directories on the file system. The connected documents do not specify a patched ver...
CVE-2022-31511
The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31510
The CVE-2022-31510 entry concerns the sergeKashkin/Simple-RAT repository (before 2022-05-03) where an unsafe use of Flask send_file enables absolute path traversal. The root cause is improper handling of file paths in the Flask call, leading to potential access to arbitrary files on the server. T...
CVE-2022-31510
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31509
CVE-2022-31509 affects the repository iedadata/usap-dc-website (version ≤ 1.0.1). The vulnerability is an absolute path traversal created by unsafe use of Flask’s send_file function, enabling traversal of server filesystem paths. The issue is documented across multiple sources (NVD, Red Hat, OSV,...
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31508
CVE-2022-31508 affects the idayrus/evoting repository prior to 2022-05-08. The vulnerability arises from unsafe use of Flask’s send_file, enabling absolute path traversal that could allow access to arbitrary files/directories on the file system. NVD CVSSv3.1 base score 9.3 (CRITICAL) with network...
CVE-2022-31508
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31508
The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31507
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31507
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31507
CVE-2022-31507 affects the ganga-devs/ganga repository prior to 8.5.10. The vulnerability is an absolute path traversal caused by unsafe use of Flask send_file, enabling access to unintended files via absolute paths. Documentation from Red Hat, GHSA, OSV, and Veracode-affiliated entries consisten...
CVE-2022-31507
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31506
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...