SetupBox 路径遍历漏洞

SetupBox is a middleware for implementing your own storage cloud by Kim Taehwan, an individual developer in Korea. A security vulnerability exists in SetupBox version 1.0 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20799

Name of the Vulnerable Software and Affected Versions bonn-activity-maps/bam annotation tool versions through 2021-08-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

PT-2022-20843

Name of the Vulnerable Software and Affected Versions adriankoczuruek/ceneo-web-scrapper versions prior to 2021-03-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-03-16, update the repository...

Python-Recipe-Database 路径遍历漏洞

Python-Recipe-Database is a recipe storage and retrieval system using Python and Mongo. A path traversal vulnerability exists in Python-Recipe-Database version 2021-03-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20862

Name of the Vulnerable Software and Affected Versions zippies/testplatform versions through 2016-07-19 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-07-19, consider restricting access to the se...

PT-2022-20785

Name of the Vulnerable Software and Affected Versions Delor4/CarceresBE version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider updating the Flask send file function usage to prevent...

PT-2022-20772 · Orchest · Orchest

Name of the Vulnerable Software and Affected Versions: orchest/orchest versions prior to 2022.05.0 Description: The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations: For versions prior to 2022.05.0, update to version 2022.05.0 or later to...

flask-file-server 路径遍历漏洞

flask-file-server is a file server with a front-end for browsing, uploading, and streaming files from Wildog Personal Developer. flask-file-server 2020-02-20 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly...

PT-2022-20789

Name of the Vulnerable Software and Affected Versions Lukasavicus/WindMill repository version 1.0 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For version 1.0, consider restricting access to the send file function...

PT-2022-20796

Name of the Vulnerable Software and Affected Versions SummaLabs/DLS repository version 0.1.0 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For SummaLabs/DLS repository version 0.1.0 and earlier, consider...

PT-2022-20822

Name of the Vulnerable Software and Affected Versions olmax99/pyathenastack repository through 2019-11-08 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-11-08, consider restricting access to the...

equanimity 路径遍历漏洞

equanimity is a world-building game by A. F. Dudley, a solo developer with an emphasis on squad-based turn-based combat and balance. equanimity 2014-04-23 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filte...

Karaokey 路径遍历漏洞

Karaokey is a vocal remover by Vinay Patel personal developer. It can automatically separate vocals and instruments. A security vulnerability exists in Karaokey version 2019-12-11 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path...

ThunderDocs 路径遍历漏洞

ThunderDocs is an open source tool from the ThundeRatz Robotics Team. Google Docs permissions can be accessed on the desktop to easily view, create, upload and download documents. ThunderDocs version 2020-05-01 and earlier versions have a security vulnerability that stems from an incorrect call t...

glance 路径遍历漏洞

glance is a dictionary visualization repository open source by nlpweb. glance 2014-06-27 version and earlier versions have a security vulnerability , the vulnerability stems from Flask's sendfile function call incorrectly leads to absolute path traversal...

golem 路径遍历漏洞

golem is a git continuous integration, testing, and release tool by Dennis Kaarsemaker, an individual developer in the Netherlands. A security vulnerability exists in golem version 2016-05-17 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute pat...

flask-yeoman 路径遍历漏洞

flask-yeoman is a Flask blueprint by Thomas Sileo, a French personal developer. It makes creating web applications with Yeoman and Flask a breeze. A security vulnerability exists in flask-yeoman version 2013-09-13 and earlier, which stems from an incorrect call to Flask's sendfile function that...

syrabond 路径遍历漏洞

syrabond is an MQTT-based smart home system. A security vulnerability exists in syrabond version 2020-05-25 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

vprj 路径遍历漏洞

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

cockybook 路径遍历漏洞

cockybook is a simple book sharing service on opds server by Leo, an individual developer in China. A security vulnerability exists in cockybook, which stems from an insecure use of the Flask sendfile function...