CVE-2022-31524

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31524: Improper Limitation of a Pathname to a Restricted Directory

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20795

Name of the Vulnerable Software and Affected Versions PureStorage-OpenConnect/swagger repository versions 1.1.5 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.1.5 and earlier, update to a versi...