CVE-2022-31537: Improper Limitation of a Pathname to a Restricted Directory

The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20808

Name of the Vulnerable Software and Affected Versions jmcginty15/Solar-system-simulator versions prior to 2021-07-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-07-26, consider restricting...