3 matches found
CVE-2022-31504
The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS8.1AI score0.01506EPSS
SaveExploits1References1
EUVD-2022-52962
Malicious code in bioql PyPI...
9.3CVSS9.2AI score0.01506EPSS
SaveExploits1References2
PT-2022-20773
Name of the Vulnerable Software and Affected Versions ChangeWeDer/BaiduWenkuSpider flaskWeb versions prior to 2021-11-29 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-11-29, update to a versio...
9.3CVSS0.01506EPSS
SaveExploits1References4
20