Lucene search
+L

2 matches found

OSV
OSV
added 2022/07/12 12:0 a.m.40 views

GHSA-X2PC-FQRW-HC7F SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS9.4AI score0.01398EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/07/12 12:0 a.m.28 views

SatyaLab opendiamond 10.1.1 vulnerable to path traversal because Flask send_file function used unsafely

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely. A patch is available on the master branch of the repository...

9.3CVSS8.9AI score0.01398EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder