CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579

The CVE-2022-31579 entry involves the ralphjzhang/iasset repository (through 2022-05-04) with unsafe use of Flask’s send_file, enabling absolute path traversal. Affected component: repository code using Flask send_file; root cause: unsafe file path handling. Potential impact: absolute path traver...

iasset 路径遍历漏洞

iasset is a repository by Ralph Zhang, a personal developer. iasset has a security vulnerability in version 2022-05-04 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

PT-2022-20852

Name of the Vulnerable Software and Affected Versions ralphjzhang/iasset repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2022-05-04, consider restricting access to the se...

CVE-2022-31579: Improper Limitation of a Pathname to a Restricted Directory

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...