EUVD-2022-52999

Malicious code in bioql PyPI...

Path traversal

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31543

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31543

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20815

Name of the Vulnerable Software and Affected Versions maxtortime/SetupBox versions 1.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0 and earlier, consider restricting access to the send file...

CVE-2022-31543: Improper Limitation of a Pathname to a Restricted Directory

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...