PT-2024-14505

Name of the Vulnerable Software and Affected Versions flaskcode versions through 0.0.8 Description An issue in the flaskcode package allows an unauthenticated directory traversal, which can be exploited with a GET request to the "/resource-data/.txt" API endpoint. This enables attackers to read...