PT-2022-20828

Name of the Vulnerable Software and Affected Versions rusyasoft/TrainEnergyServer versions through 2017-08-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

travel_blahg 路径遍历漏洞

travelblahg is a Python framework by Daniel Kolbman, a personal developer in the United States. It is used for tracking travel. A security vulnerability exists in travelblahg version 2016-01-16 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute...

CVE-2022-31533: Improper Limitation of a Pathname to a Restricted Directory

The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20805

Name of the Vulnerable Software and Affected Versions echoleegroup/PythonWeb repository through 2018-10-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the echoleegroup/PythonWeb repository through 2018-10-31,...

PT-2022-20851

Name of the Vulnerable Software and Affected Versions piaoyunsoft/bt lnmp versions through 2019-10-10 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

CVE-2022-31525: Improper Limitation of a Pathname to a Restricted Directory

The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20854

Name of the Vulnerable Software and Affected Versions sanojtharindu/caretakerr-api versions through 2021-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended director...

PT-2022-20774

Name of the Vulnerable Software and Affected Versions cheo0/MercadoEnLineaBack repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For cheo0/MercadoEnLineaBack repository through 2022-05-04,...

PT-2022-20791

Name of the Vulnerable Software and Affected Versions Luxas98/logstash-management-api repository through 2020-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-04, consider restricting...

opendiamond 路径遍历漏洞

opendiamond is an interactive search for non-indexed data open-sourced by cmusatyalab in the United States. A path traversal vulnerability exists in opendiamond version 10.1.1, which stems from insecure use of the Flask sendfile function...

flask-mvc 路径遍历漏洞

flask-mvc is a repository by the individual developer Candra Nur Ihsan. A security vulnerability exists in flask-mvc version 2020-09-14 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

flask-file-server 路径遍历漏洞

flask-file-server is a file server with a front-end for browsing, uploading, and streaming files from Wildog Personal Developer. flask-file-server 2020-02-20 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly...

PT-2022-20797

Name of the Vulnerable Software and Affected Versions ThundeRatz/ThunderDocs repository versions prior to 2020-05-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-01, consider restricting...

PT-2022-20782

Name of the Vulnerable Software and Affected Versions Atom02/flask-mvc versions prior to 2020-09-14 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-09-14, update to a version that safely utilize...

CVE-2022-31556: Improper Limitation of a Pathname to a Restricted Directory

The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20801

Name of the Vulnerable Software and Affected Versions csm-aut/csm repository versions through 3.5 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 3.5, consider restricting access to the send file...

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

PT-2022-20777

Name of the Vulnerable Software and Affected Versions idayrus/evoting versions prior to 2022-05-08 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-08, update to a version that includes a...

PT-2022-20859

Name of the Vulnerable Software and Affected Versions umeshpatil-dev/Home internet repository through 2020-08-28 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20810

Name of the Vulnerable Software and Affected Versions kotekan/kotekan versions 2021.11 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...