CVE-2022-31532: Improper Limitation of a Pathname to a Restricted Directory

The dankolbman/travelblahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20825

Name of the Vulnerable Software and Affected Versions rainsoupah/sleep-learner versions through 2021-02-21 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-02-21, consider restricting access to th...

PT-2022-20847

Name of the Vulnerable Software and Affected Versions deepaliupadhyay/RealEstate repository through 2018-11-30 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the deepaliupadhyay/RealEstate repository through...

PT-2022-20803

Name of the Vulnerable Software and Affected Versions dankolbman/travel blahg versions prior to 2016-01-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2016-01-17, update to a version newer than...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Solar-system-simulator 路径遍历漏洞

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

PT-2022-20816

Name of the Vulnerable Software and Affected Versions meenstein/rbtm versions 1.5 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20798

Name of the Vulnerable Software and Affected Versions Wildog/flask-file-server versions through 2020-02-20 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to files outside the intended directory...

helm 路径遍历漏洞

helm is a Kubernetes package manager. A security vulnerability exists in helm, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20789

Name of the Vulnerable Software and Affected Versions Lukasavicus/WindMill repository version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider restricting access to the send file function...

PT-2022-20794

Name of the Vulnerable Software and Affected Versions PaddlePaddle/Anakin versions through 0.1.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 0.1.1, consider restricting access to the send file...

PT-2022-20840

Name of the Vulnerable Software and Affected Versions DSABenchmark/DSAB repository versions through 2.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2.1, consider restricting access to the send fil...

PT-2022-20770

Name of the Vulnerable Software and Affected Versions OnyxForum versions prior to 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-04, update to a version released after 2022-05-04 ...

PT-2022-20792

Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...

PT-2022-20821

Name of the Vulnerable Software and Affected Versions olmax99/helm-flask-celery versions prior to 2022-05-25 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-25, update the repository to a...

PT-2022-20802

Name of the Vulnerable Software and Affected Versions dainst/cilantro versions 0.0.0 through 0.0.4 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.0.0 through 0.0.4, consider updating to a version where the...

PT-2022-20796

Name of the Vulnerable Software and Affected Versions SummaLabs/DLS repository version 0.1.0 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For SummaLabs/DLS repository version 0.1.0 and earlier, consider...

PT-2022-20771

Name of the Vulnerable Software and Affected Versions operatorequals/wormnest repository version 0.4.7 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For operatorequals/wormnest repository version 0.4.7 and...

PT-2022-20795

Name of the Vulnerable Software and Affected Versions PureStorage-OpenConnect/swagger repository versions 1.1.5 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.1.5 and earlier, update to a versi...

PT-2022-20819

Name of the Vulnerable Software and Affected Versions noamezekiel/sphere repository through 2020-05-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-31, consider restricting access to the se...