CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31544

The CVE-2022-31544 entry concerns the meerstein/rbtm repository (up to version 1.5) where an unsafe use of Flask’s send_file enables absolute path traversal. The vulnerability is triggered by improper handling of file paths in the server’s response logic, exposing potential access to sensitive fi...

rbtm 路径遍历漏洞

rbtm is a web application for performing computerized tomography experiments by the individual developer meerstein in Russia. A security vulnerability exists in rbtm version 1.5 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20816

Name of the Vulnerable Software and Affected Versions meenstein/rbtm versions 1.5 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

CVE-2022-31544: Improper Limitation of a Pathname to a Restricted Directory

The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...