Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/07/12 12:00 a.m.33 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01475EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/07/12 12:00 a.m.46 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01475EPSS
SaveExploits1References5
Rows per page
Query Builder