Lucene search
+L

2 matches found

OSV
OSV
•added 2022/07/12 12:00 a.m.•49 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01519EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/07/12 12:00 a.m.•35 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01519EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder