3 matches found
CVE-2022-31520
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS7AI score0.01337EPSS
SaveExploits1References1
Path traversal
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
6.4CVSS9.3AI score0.01337EPSS
SaveExploits1References1Affected Software1
CVE-2022-31520: Improper Limitation of a Pathname to a Restricted Directory
The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
20