Lucene search
+L

5 matches found

OSV
OSV
•added 2022/07/11 1:15 a.m.•14 views

CVE-2022-31550

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•6 views

CVE-2022-31550

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/11 12:58 a.m.•62 views

CVE-2022-31550

The CVE-2022-31550 entry concerns the olmax99/pyathenastack repository (up to 2019-11-08) where absolute path traversal can be triggered by an unsafe use of Flask’s send_file function. Multiple sources (NVD, Red Hat, PRION/CVE aggregators, CVE lists, CNNVD) corroborate that the vulnerability aris...

9.3CVSS9.3AI score0.01337EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•11 views

pyathenastack 路径遍历漏洞

pyathenastack is a Web API project by olmax99 individual developers. Features a distributed backend staff for reading larger datasets and storing them to AWS S3. A path traversal vulnerability exists in pyathenastack version 2019-11-08 and earlier, which stems from an incorrect call to Flask's...

9.3CVSS8.3AI score0.01337EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•5 views

CVE-2022-31550: Improper Limitation of a Pathname to a Restricted Directory

The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Rows per page
Query Builder