CVE-2022-31509

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31509

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31509

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31509

CVE-2022-31509 affects the repository iedadata/usap-dc-website (version ≤ 1.0.1). The vulnerability is an absolute path traversal created by unsafe use of Flask’s send_file function, enabling traversal of server filesystem paths. The issue is documented across multiple sources (NVD, Red Hat, OSV,...