The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.3AI score0.01272EPSS
SaveExploits1References2
OSV•added 2022/07/11 1:15 a.m.•9 views
CVE-2022-31555
The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...