CVE-2022-31542

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31542

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31542

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20814

Name of the Vulnerable Software and Affected Versions mandoku/mdweb versions through 2015-05-07 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2015-05-07, consider restricting access to the send file...

CVE-2022-31542: Improper Limitation of a Pathname to a Restricted Directory

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...