PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

PT-2022-20777

Name of the Vulnerable Software and Affected Versions idayrus/evoting versions prior to 2022-05-08 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-08, update to a version that includes a...

PT-2022-20859

Name of the Vulnerable Software and Affected Versions umeshpatil-dev/Home internet repository through 2020-08-28 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20810

Name of the Vulnerable Software and Affected Versions kotekan/kotekan versions 2021.11 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20834

Name of the Vulnerable Software and Affected Versions varijkapil13/Sphere ImageBackend versions through 2019-10-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20776

Name of the Vulnerable Software and Affected Versions ganga-devs/ganga versions prior to 8.5.10 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 8.5.10, update to version 8.5.10 or later to resolv...

PT-2022-20854

Name of the Vulnerable Software and Affected Versions sanojtharindu/caretakerr-api versions through 2021-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended director...

PT-2022-20799

Name of the Vulnerable Software and Affected Versions bonn-activity-maps/bam annotation tool versions through 2021-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

nursequest 路径遍历漏洞

nursequest is a management system for nurses' tasks by Romain Vincent, an individual developer in France. A security vulnerability exists in nursequest version 2018-02-22 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20851

Name of the Vulnerable Software and Affected Versions piaoyunsoft/bt lnmp versions through 2019-10-10 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20785

Name of the Vulnerable Software and Affected Versions Delor4/CarceresBE version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider updating the Flask send file function usage to prevent...

CVE-2022-31520: Improper Limitation of a Pathname to a Restricted Directory

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510: Improper Limitation of a Pathname to a Restricted Directory

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519: Improper Limitation of a Pathname to a Restricted Directory

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31522: Improper Limitation of a Pathname to a Restricted Directory

The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

PT-2022-20805

Name of the Vulnerable Software and Affected Versions echoleegroup/PythonWeb repository through 2018-10-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the echoleegroup/PythonWeb repository through 2018-10-31,...

PT-2022-20833

Name of the Vulnerable Software and Affected Versions uncleYiba/photo tag repository through 2020-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the uncleYiba/photo tag repository through 2020-08-31, consider...

PT-2022-20837

Name of the Vulnerable Software and Affected Versions woduq1414/munhak-moa versions prior to 2022-05-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...