CVE-2022-31545

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31545

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31545

The CVE-2022-31545 vulnerability affects the ml-inory/ModelConverter repository (up to 2021-04-26). It is caused by unsafe usage of Flask send_file, enabling absolute path traversal. The public description explicitly states this leads to path traversal in that repository.

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

CVE-2022-31545: Improper Limitation of a Pathname to a Restricted Directory

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...