CVE-2022-31541

The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31541

The CVE-2022-31541 entry concerns the Barry-Voice-Assistant project (GitHub) where absolute path traversal is possible due to unsafe use of Flask’s send_file. The Red Hat, CNVD, CNVD-like entries align with this description, identifying the issue as a path traversal vulnerability in Barry-Voice-A...

PT-2022-20813

Name of the Vulnerable Software and Affected Versions lyubolp/Barry-Voice-Assistant repository through 2021-01-18 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-01-18, consider restricting...