PT-2022-20857

Name of the Vulnerable Software and Affected Versions sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20824

Name of the Vulnerable Software and Affected Versions project-anuvaad/anuvaad-corpus versions prior to 2020-11-23 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-11-23, update to a version that...

PT-2022-20858

Name of the Vulnerable Software and Affected Versions stonethree/s3label versions through 2019-08-14 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-08-14, consider restricting access to the...

PT-2022-20833

Name of the Vulnerable Software and Affected Versions uncleYiba/photo tag repository through 2020-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the uncleYiba/photo tag repository through 2020-08-31, consider...

PT-2022-20855

Name of the Vulnerable Software and Affected Versions scorelab/OpenMF versions prior to 2022-05-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-03, update to a version released after...

PT-2022-20820

Name of the Vulnerable Software and Affected Versions nrlakin/homepage repository through 2017-03-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20845

Name of the Vulnerable Software and Affected Versions ceee-vip/cockybook versions prior to 2015-04-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2015-04-16, consider restricting access to the se...

PT-2022-20812

Name of the Vulnerable Software and Affected Versions kumardeepak/hin-eng-preprocessing repository through 2019-07-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-07-16, consider restricting...

PT-2022-20783

Name of the Vulnerable Software and Affected Versions BolunHan/Krypton repository through 2021-06-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-06-03, consider restricting access to the send...

PT-2022-20849

Name of the Vulnerable Software and Affected Versions heidi-luong1109/shackerpanel repository through 2021-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For heidi-luong1109/shackerpanel repository through...

CVE-2022-31588: Improper Limitation of a Pathname to a Restricted Directory

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31586: Improper Limitation of a Pathname to a Restricted Directory

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31587: Improper Limitation of a Pathname to a Restricted Directory

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31585: Improper Limitation of a Pathname to a Restricted Directory

The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31583: Improper Limitation of a Pathname to a Restricted Directory

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582: Improper Limitation of a Pathname to a Restricted Directory

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31581: Improper Limitation of a Pathname to a Restricted Directory

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579: Improper Limitation of a Pathname to a Restricted Directory

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31578: Improper Limitation of a Pathname to a Restricted Directory

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31577: Improper Limitation of a Pathname to a Restricted Directory

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...