CVE-2022-31503

The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31503

The CVE affects the orchest/orchest repository prior to version 2022.05.0, where absolute path traversal is possible due to unsafe use of Flask’s send_file function. Impact: potential exposure of filesystem paths. A fix is available in 2022.05.0 or later; upgrade to that release to remediate.

CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31502

CVE-2022-31502 is a path-traversal vulnerability in the operatorequals/wormnest repository up to version 0.4.7, caused by unsafe use of Flask send_file that enables absolute path traversal. The issue is documented across multiple sources (NVD, Red Hat, OSV etc.), with the core detail that an atta...

CVE-2022-31502

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31501

The CVE-2022-31501 entry concerns the ChaoticOnyx/OnyxForum repository prior to 2022-05-04, where absolute path traversal is possible due to unsafe use of Flask’s send_file. Affected component: OnyxForum’s server-side file delivery (Flask). Root cause: improper handling in send_file usage enablin...

PT-2022-20810

Name of the Vulnerable Software and Affected Versions kotekan/kotekan versions 2021.11 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20795

Name of the Vulnerable Software and Affected Versions PureStorage-OpenConnect/swagger repository versions 1.1.5 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.1.5 and earlier, update to a versi...

chainerrl-visualizer 路径遍历漏洞

chainerrl-visualizer is Chainer's open source way to visually analyze the behavior of ChainerRL agents to make debugging easier. chainerrl-visualizer suffers from a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter the resource or file path f...

PT-2022-20770

Name of the Vulnerable Software and Affected Versions OnyxForum versions prior to 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-04, update to a version released after 2022-05-04 ...

PT-2022-20794

Name of the Vulnerable Software and Affected Versions PaddlePaddle/Anakin versions through 0.1.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 0.1.1, consider restricting access to the send file...

swagger 路径遍历漏洞

swagger is a tool that provides Pure FlashArray and FlashBlade API documentation into the popular interactive Swagger UI. A security vulnerability exists in swagger version 1.1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

SetupBox 路径遍历漏洞

SetupBox is a middleware for implementing your own storage cloud by Kim Taehwan, an individual developer in Korea. A security vulnerability exists in SetupBox version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20771

Name of the Vulnerable Software and Affected Versions operatorequals/wormnest repository version 0.4.7 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For operatorequals/wormnest repository version 0.4.7 and...

usap-dc-website 路径遍历漏洞

usap-dc-website is an open source repository for usap-dc website by Interdisciplinary Earth Data Alliance. It includes a javascript client application and a python/flask server. A path traversal vulnerability exists in usap-dc-website version 1.0.1, which stems from insecure use of the Flask...

PT-2022-20822

Name of the Vulnerable Software and Affected Versions olmax99/pyathenastack repository through 2019-11-08 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-11-08, consider restricting access to the...