WindMill 路径遍历漏洞

WindMill is a free open source tool from the individual developers at Lukasavicus. It is used to control job execution in Python. A security vulnerability exists in WindMill version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute...

PT-2022-20789

Name of the Vulnerable Software and Affected Versions Lukasavicus/WindMill repository version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider restricting access to the send file function...

PT-2022-20772 · Orchest · Orchest

Name of the Vulnerable Software and Affected Versions: orchest/orchest versions prior to 2022.05.0 Description: The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations: For versions prior to 2022.05.0, update to version 2022.05.0 or later to...

PT-2022-20816

Name of the Vulnerable Software and Affected Versions meenstein/rbtm versions 1.5 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20784

Name of the Vulnerable Software and Affected Versions Caoyongqi912/Fan Platform repository versions prior to 2021-04-20 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-20, consider restrictin...

Harveyzyh Python 路径遍历漏洞

Harveyzyh Python is a private codebase. A security vulnerability exists in GitHub's Harveyzyh/Python version 2022-05-04 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PythonWeb 路径遍历漏洞

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20800

Name of the Vulnerable Software and Affected Versions cinemaproject/monorepo versions through 2021-03-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

flask-file-server 路径遍历漏洞

flask-file-server is a file server with a front-end for browsing, uploading, and streaming files from Wildog Personal Developer. flask-file-server 2020-02-20 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20787

Name of the Vulnerable Software and Affected Versions HolgerGraef/MSM repository versions through 2021-04-20 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-04-20, consider restricting access to...

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

PT-2022-20859

Name of the Vulnerable Software and Affected Versions umeshpatil-dev/Home internet repository through 2020-08-28 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

golem 路径遍历漏洞

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

PT-2022-20797

Name of the Vulnerable Software and Affected Versions ThundeRatz/ThunderDocs repository versions prior to 2020-05-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-01, consider restricting...

PT-2022-20808

Name of the Vulnerable Software and Affected Versions jmcginty15/Solar-system-simulator versions prior to 2021-07-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-07-26, consider restricting...

PT-2022-20835

Name of the Vulnerable Software and Affected Versions waveyan/internshipsystem versions through 2018-05-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20834

Name of the Vulnerable Software and Affected Versions varijkapil13/Sphere ImageBackend versions through 2019-10-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...

PT-2022-20798

Name of the Vulnerable Software and Affected Versions Wildog/flask-file-server versions through 2020-02-20 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to files outside the intended directory...