CVE-2022-31534

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31534

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31534

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31534

CVE-2022-31534 affects the echoleegroup/PythonWeb repository up to 2018-10-31. The issue is an absolute path traversal caused by unsafe use of Flask’s send_file, enabling an attacker to access files outside the intended directory. The Red Hat/NVD entries substantiate the same description. No expl...

PythonWeb 路径遍历漏洞

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...