CVE-2022-31528: Improper Limitation of a Pathname to a Restricted Directory

The bonn-activity-maps/bamannotationtool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31524: Improper Limitation of a Pathname to a Restricted Directory

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31523: Improper Limitation of a Pathname to a Restricted Directory

The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31522: Improper Limitation of a Pathname to a Restricted Directory

The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31521: Improper Limitation of a Pathname to a Restricted Directory

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31520: Improper Limitation of a Pathname to a Restricted Directory

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519: Improper Limitation of a Pathname to a Restricted Directory

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31516: Improper Limitation of a Pathname to a Restricted Directory

The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31517: Improper Limitation of a Pathname to a Restricted Directory

The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31518: Improper Limitation of a Pathname to a Restricted Directory

The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31509: Improper Limitation of a Pathname to a Restricted Directory

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510: Improper Limitation of a Pathname to a Restricted Directory

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31512: Improper Limitation of a Pathname to a Restricted Directory

The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31511: Improper Limitation of a Pathname to a Restricted Directory

The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31508: Improper Limitation of a Pathname to a Restricted Directory

The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31505: Improper Limitation of a Pathname to a Restricted Directory

The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31504: Improper Limitation of a Pathname to a Restricted Directory

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31503: Improper Limitation of a Pathname to a Restricted Directory

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501: Improper Limitation of a Pathname to a Restricted Directory

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20806

Name of the Vulnerable Software and Affected Versions freefood89/Fishtank repository through 2015-06-24 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the freefood89/Fishtank repository through 2015-06-24, consider...