CVE-2022-31505

The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31505

The CVE-2022-31505 entry covers a path traversal vulnerability in the open-source repository cheo0/MercadoEnLineaBack, present through 2022-05-04. Affected component: the server-side Flask application’s use of send_file, which is described as unsafe and leads to absolute path traversal. This coul...

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31504

CVE-2022-31504 concerns the ChangeWeDer/BaiduWenkuSpider_flaskWeb repository, with a path traversal vulnerability caused by using Flask’s send_file unsafely. The issue exists in versions prior to 2021-11-29 and can enable an attacker to perform absolute path traversal to view arbitrary files on t...

CVE-2022-31503

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31503

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31503

The CVE affects the orchest/orchest repository prior to version 2022.05.0, where absolute path traversal is possible due to unsafe use of Flask’s send_file function. Impact: potential exposure of filesystem paths. A fix is available in 2022.05.0 or later; upgrade to that release to remediate.

CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31502

CVE-2022-31502 is a path-traversal vulnerability in the operatorequals/wormnest repository up to version 0.4.7, caused by unsafe use of Flask send_file that enables absolute path traversal. The issue is documented across multiple sources (NVD, Red Hat, OSV etc.), with the core detail that an atta...

CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The CVE-2022-31501 entry concerns the ChaoticOnyx/OnyxForum repository prior to 2022-05-04, where absolute path traversal is possible due to unsafe use of Flask’s send_file. Affected component: OnyxForum’s server-side file delivery (Flask). Root cause: improper handling in send_file usage enablin...

CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Fishtank 路径遍历漏洞

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

Annotation Tool 路径遍历漏洞

Annotation Tool is a Bonn activity map annotation tool open sourced by bonn-activity-maps. 2021-08-31 and earlier versions of Annotation Tool are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource o...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

cilantro 路径遍历漏洞

cilantro is an open source task runner from Deutsches Archäologisches Institut in Germany. Designed to manage long running distributed jobs that operate on file system objects . cilantro version 0.0.4 and earlier versions of a security vulnerability , the vulnerability stems from Flask's sendfile...

Mosiac 路径遍历漏洞

Mosiac is a web application for pixelated images. A security vulnerability exists in Mosiac version 1.0.0 and prior versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

logstash-management-api 路径遍历漏洞

logstash-management-api is a management system interface repository by Lukas Chripko, an individual developer in Sweden. A security vulnerability exists in logstash-management-api version 2020-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in...

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...