Lucene search
+L

3 matches found

Mend
Mend
•added 2022/07/11 12:58 a.m.•6 views

CVE-2022-31545

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-31545: Improper Limitation of a Pathname to a Restricted Directory

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•3 views

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

9.3CVSS0.01337EPSS
SaveExploits1References3
Rows per page
Query Builder