CVE-2022-31520

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20791

Name of the Vulnerable Software and Affected Versions Luxas98/logstash-management-api repository through 2020-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-04, consider restricting...

CVE-2022-31520: Improper Limitation of a Pathname to a Restricted Directory

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...