Lucene search
+L

4 matches found

OSV
OSV
added 2022/07/11 1:15 a.m.5 views

CVE-2022-31550

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01242EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31550

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01242EPSS
SaveExploits1References2
CVE
CVE
added 2022/07/11 12:58 a.m.47 views

CVE-2022-31550

The CVE-2022-31550 entry concerns the olmax99/pyathenastack repository (up to 2019-11-08) where absolute path traversal can be triggered by an unsafe use of Flask’s send_file function. Multiple sources (NVD, Red Hat, PRION/CVE aggregators, CVE lists, CNNVD) corroborate that the vulnerability aris...

9.3CVSS9.3AI score0.01242EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/11 12:0 a.m.5 views

pyathenastack 路径遍历漏洞

pyathenastack is a Web API project by olmax99 individual developers. Features a distributed backend staff for reading larger datasets and storing them to AWS S3. A path traversal vulnerability exists in pyathenastack version 2019-11-08 and earlier, which stems from an incorrect call to Flask's...

9.3CVSS8.3AI score0.01242EPSS
SaveExploits1References2
Rows per page
Query Builder