Flaskcode Security Vulnerability

Flaskcode is a web-based code editor on the Python Flask framework. A security vulnerability exists in Flaskcode 0.0.8 and earlier versions, which stems from a directory traversal vulnerability that could allow an unauthenticated attacker to read arbitrary files...

PT-2024-14506

Name of the Vulnerable Software and Affected Versions flaskcode versions through 0.0.8 Description An issue was discovered that allows for unauthenticated directory traversal, which can be exploited with a POST request to the "/update-resource-data/" API endpoint. This enables attackers to write ...