2 matches found
CVE-2022-31509
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS0.01337EPSS
SaveExploits1References1
CVE-2022-31509: Improper Limitation of a Pathname to a Restricted Directory
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
20