CVE-2022-31563

CVE-2022-31563 affects the whmacmac/vprj repository (up to 2022-04-06). It is due to an unsafe use of Flask send_file, enabling absolute path traversal. NVD/V3.1 metrics indicate a high-severity impact with confidentiality loss (C:H) and a base score of 9.3, network attack vector, no privileges r...

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20835

Name of the Vulnerable Software and Affected Versions waveyan/internshipsystem versions through 2018-05-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20859

Name of the Vulnerable Software and Affected Versions umeshpatil-dev/Home internet repository through 2020-08-28 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

nursequest 路径遍历漏洞

nursequest is a management system for nurses' tasks by Romain Vincent, an individual developer in France. A security vulnerability exists in nursequest version 2018-02-22 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

munhak-moa 路径遍历漏洞

munhak-moa is a literary platform for woduq1414 individual developers. A security vulnerability exists in munhak-moa, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20770

Name of the Vulnerable Software and Affected Versions OnyxForum versions prior to 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-04, update to a version released after 2022-05-04 ...

PT-2022-20794

Name of the Vulnerable Software and Affected Versions PaddlePaddle/Anakin versions through 0.1.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 0.1.1, consider restricting access to the send file...

PT-2022-20829

Name of the Vulnerable Software and Affected Versions seveas/golem repository through 2016-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-05-17, consider restricting access to the send fil...

PT-2022-20792

Name of the Vulnerable Software and Affected Versions Niyaz-Mohamed/mosaic version 1.0.0 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.0.0 and earlier, consider restricting access to the send...

kotekan 路径遍历漏洞

kotekan is a high performance radio data processing pipeline from kotekan open source. A security vulnerability exists in kotekan version 2021.11 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20810

Name of the Vulnerable Software and Affected Versions kotekan/kotekan versions 2021.11 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20827

Name of the Vulnerable Software and Affected Versions romain20100/nursequest repository through 2018-02-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the romain20100/nursequest repository through 2018-02-22,...

csm 路径遍历漏洞

csm is a csm-aut open source automation and orchestration framework for IOS-XR devices. csm 3.5 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which can be exploited by...

PT-2022-20774

Name of the Vulnerable Software and Affected Versions cheo0/MercadoEnLineaBack repository through 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For cheo0/MercadoEnLineaBack repository through 2022-05-04,...

PT-2022-20800

Name of the Vulnerable Software and Affected Versions cinemaproject/monorepo versions through 2021-03-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PT-2022-20825

Name of the Vulnerable Software and Affected Versions rainsoupah/sleep-learner versions through 2021-02-21 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-02-21, consider restricting access to th...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20783

Name of the Vulnerable Software and Affected Versions BolunHan/Krypton repository through 2021-06-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-06-03, consider restricting access to the send...

PT-2022-20818

Name of the Vulnerable Software and Affected Versions nlpweb/glance versions prior to 2014-06-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2014-06-27, consider updating to a version that safely...