Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•16 views

CVE-2022-31548

The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
Mend
Mend
•added 2022/07/11 12:58 a.m.•8 views

CVE-2022-31548

The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-31548: Improper Limitation of a Pathname to a Restricted Directory

The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•4 views

PT-2022-20820

Name of the Vulnerable Software and Affected Versions nrlakin/homepage repository through 2017-03-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rows per page
Query Builder