CVE-2022-31562

The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31562

The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31562

The CVE-2022-31562 entry is linked to the waveyan/internshipsystem repository prior to 2018-05-22, where an unsafe use of Flask’s send_file enables absolute path traversal. Documented details specify that the vulnerability stems from how send_file is called, allowing traversal of the host filesys...

internshipsystem 路径遍历漏洞

internshipsystem is a student internship system for schools by wlwl individual developers. A security vulnerability exists in internshipsystem version 2018-05-22 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...