CVE-2022-31563

CVE-2022-31563 affects the whmacmac/vprj repository (up to 2022-04-06). It is due to an unsafe use of Flask send_file, enabling absolute path traversal. NVD/V3.1 metrics indicate a high-severity impact with confidentiality loss (C:H) and a base score of 9.3, network attack vector, no privileges r...

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20810

Name of the Vulnerable Software and Affected Versions kotekan/kotekan versions 2021.11 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20770

Name of the Vulnerable Software and Affected Versions OnyxForum versions prior to 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-04, update to a version released after 2022-05-04 ...

PT-2022-20794

Name of the Vulnerable Software and Affected Versions PaddlePaddle/Anakin versions through 0.1.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 0.1.1, consider restricting access to the send file...

PT-2022-20792

Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...

kotekan 路径遍历漏洞

kotekan is a high performance radio data processing pipeline from kotekan open source. A security vulnerability exists in kotekan version 2021.11 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

evoting 路径遍历漏洞

evoting is an e-voting application open sourced by Idayrus Studio in Indonesia. evoting versions prior to 2022-05-08 contain a path traversal vulnerability that stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, which could be...

SetupBox 路径遍历漏洞

SetupBox is a middleware for implementing your own storage cloud by Kim Taehwan, an individual developer in Korea. A security vulnerability exists in SetupBox version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20290 · Unknown · Semwifiapclient

Name of the Vulnerable Software and Affected Versions: SemWifiApClient versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability in the sendDHCPACKBroadcast function. This vulnerability allows an attacker to access the WiFi AP client MA...

PT-2022-20822

Name of the Vulnerable Software and Affected Versions olmax99/pyathenastack repository through 2019-11-08 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-11-08, consider restricting access to the...

PT-2022-20809

Name of the Vulnerable Software and Affected Versions joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the...

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

PT-2022-20774

Name of the Vulnerable Software and Affected Versions cheo0/MercadoEnLineaBack repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For cheo0/MercadoEnLineaBack repository through 2022-05-04,...

PT-2022-20785

Name of the Vulnerable Software and Affected Versions Delor4/CarceresBE version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider updating the Flask send file function usage to prevent...

PT-2022-20827

Name of the Vulnerable Software and Affected Versions romain20100/nursequest repository through 2018-02-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the romain20100/nursequest repository through 2018-02-22,...

shackerpanel 路径遍历漏洞

shackerpanel is a simple but powerful control panel for heidi-luong1109 personal developers. Web servers can be managed through a web-based GUI graphical user interface. A security vulnerability exists in shackerpanel on 2021-05-25 and earlier versions, which stems from an unsafe use of Flask's...

PT-2022-20778

Name of the Vulnerable Software and Affected Versions iedadata/usap-dc-website repository version 1.0.1 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.1 and earlier, consider restricting acce...