CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31541

The CVE-2022-31541 entry concerns the Barry-Voice-Assistant project (GitHub) where absolute path traversal is possible due to unsafe use of Flask’s send_file. The Red Hat, CNVD, CNVD-like entries align with this description, identifying the issue as a path traversal vulnerability in Barry-Voice-A...