4 matches found
CVE-2022-31507
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31507
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31507: Improper Limitation of a Pathname to a Restricted Directory
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
PT-2022-20776
Name of the Vulnerable Software and Affected Versions ganga-devs/ganga versions prior to 8.5.10 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 8.5.10, update to version 8.5.10 or later to resolv...