CVE-2022-31519

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519

The CVE-2022-31519 entry concerns the WindMill project by Lukasavicus (up to version 1.0 and earlier) where an unsafe use of Flask’s send_file enables absolute path traversal. Affected component: Flask-based file delivery in WindMill, leading to potential access to arbitrary files via path traver...

CVE-2022-31519

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31519: Improper Limitation of a Pathname to a Restricted Directory

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20789

Name of the Vulnerable Software and Affected Versions Lukasavicus/WindMill repository version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider restricting access to the send file function...