pyathenastack path traversal vulnerability

pyathenastack is a Web API project by olmax99 individual developers. Features a distributed backend staff for reading larger datasets and storing them to AWS S3. A path traversal vulnerability exists in pyathenastack version 2019-11-08 and earlier, which stems from an incorrect call to Flask's...

CVE-2022-31550: Improper Limitation of a Pathname to a Restricted Directory

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31540: Improper Limitation of a Pathname to a Restricted Directory

The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PythonWeb path traversal vulnerability

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

bt_lnmp: Path traversal vulnerability

btlnmp is a piaoyunsoft personal developer of a pagoda panel-based LNMP environment. btlnmp suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements in a resource or file path, which can be exploited by attackers to...

ShackerPanel path traversal vulnerability

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

CVE-2022-31541: Improper Limitation of a Pathname to a Restricted Directory

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31514: Improper Limitation of a Pathname to a Restricted Directory

The Caoyongqi912/FanPlatform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558: Improper Limitation of a Pathname to a Restricted Directory

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20799

Name of the Vulnerable Software and Affected Versions bonn-activity-maps/bam annotation tool versions through 2021-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

Golem path traversal vulnerability

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

CVE-2022-31507: Improper Limitation of a Pathname to a Restricted Directory

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31577: Improper Limitation of a Pathname to a Restricted Directory

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31531: Improper Limitation of a Pathname to a Restricted Directory

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Python-Recipe-Database path traversal vulnerability

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20862

Name of the Vulnerable Software and Affected Versions zippies/testplatform versions through 2016-07-19 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-07-19, consider restricting access to the se...

CVE-2022-31549: Improper Limitation of a Pathname to a Restricted Directory

The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

VideoServer path traversal vulnerability

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

PT-2022-20805

Name of the Vulnerable Software and Affected Versions echoleegroup/PythonWeb repository through 2018-10-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the echoleegroup/PythonWeb repository through 2018-10-31,...

PT-2022-20818

Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...