Lucene search
+L

4 matches found

OSV
OSV
•added 2022/07/11 1:15 a.m.•19 views

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
Mend
Mend
•added 2022/07/11 1:00 a.m.•5 views

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•6 views

CVE-2022-31571: Improper Limitation of a Pathname to a Restricted Directory

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•5 views

PT-2022-20844

Name of the Vulnerable Software and Affected Versions akashtalole/python-flask-restful-api repository through 2019-09-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rows per page
Query Builder