Path traversal

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31580

The CVE-2022-31580 case applies to the caretakerr-api Flask API (Sanoj Tharindu) and is caused by unsafe usage of Flask’s send_file, enabling absolute path traversal. Affected as of 2021-05-17 and earlier builds of caretakerr-api, the vulnerability allows an attacker to access arbitrary files on ...