PT-2022-20807

Name of the Vulnerable Software and Affected Versions jaygarza1982/ytdl-sync repository through 2021-01-02 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2021-01-02, consider restricting access to th...

PT-2022-20844

Name of the Vulnerable Software and Affected Versions akashtalole/python-flask-restful-api repository through 2019-09-16 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intende...

PT-2022-20828

Name of the Vulnerable Software and Affected Versions rusyasoft/TrainEnergyServer versions through 2017-08-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

PythonWeb 路径遍历漏洞

PythonWeb is a repository. A security vulnerability exists in PythonWeb version 2018-10-31 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

PT-2022-20782

Name of the Vulnerable Software and Affected Versions Atom02/flask-mvc versions prior to 2020-09-14 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-09-14, update to a version that safely utilize...

PT-2022-20840

Name of the Vulnerable Software and Affected Versions DSABenchmark/DSAB repository versions through 2.1 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2.1, consider restricting access to the send fil...

PT-2022-20819

Name of the Vulnerable Software and Affected Versions noamezekiel/sphere repository through 2020-05-31 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2020-05-31, consider restricting access to the se...

Fan_Platform 路径遍历漏洞

FanPlatform is a UI interface automation platform backend for Caoyongqi912 personal developers. 2021-04-20 and earlier versions of FanPlatform are vulnerable to a path traversal vulnerability, which stems from the failure of Flask's sendfile function to properly filter special elements in resourc...

PT-2022-20814

Name of the Vulnerable Software and Affected Versions mandoku/mdweb versions through 2015-05-07 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2015-05-07, consider restricting access to the send file...

PT-2022-20801

Name of the Vulnerable Software and Affected Versions csm-aut/csm repository versions through 3.5 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 3.5, consider restricting access to the send file...

ChangePop-Back 路径遍历漏洞

ChangePop-Back is an open source unizar-30226-2019-06 library for ChangePop-Back. ChangePop-Back has a security vulnerability in 2019-06-04 and earlier versions that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

PT-2022-20838

Name of the Vulnerable Software and Affected Versions yogson/syrabond versions prior to 2020-05-25 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-25, update to a version that safely uses the...

ceneo-web-scrapper 路径遍历漏洞

ceneo-web-scrapper is a web scraping tool from AdrianKoczurUEK's personal developer. ceneo-web-scrapper is vulnerable to a path traversal vulnerability, which stems from a failure of the Flask sendfile function to properly filter special elements in a resource or file path, and could be exploited...

PT-2022-20831

Name of the Vulnerable Software and Affected Versions tsileo/flask-yeoman versions through 2013-09-13 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2013-09-13, consider restricting access to the sen...

PT-2022-20776

Name of the Vulnerable Software and Affected Versions ganga-devs/ganga versions prior to 8.5.10 Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 8.5.10, update to version 8.5.10 or later to resolv...

PT-2022-20798

Name of the Vulnerable Software and Affected Versions Wildog/flask-file-server versions through 2020-02-20 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to files outside the intended directory...

PT-2022-20797

Name of the Vulnerable Software and Affected Versions ThundeRatz/ThunderDocs repository versions prior to 2020-05-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2020-05-01, consider restricting...

PT-2022-20854

Name of the Vulnerable Software and Affected Versions sanojtharindu/caretakerr-api versions through 2021-05-17 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended director...

Sphere_ImageBackend 路径遍历漏洞

SphereImageBackend is an image processing repository by the individual developer Varij Kapil in Germany. A security vulnerability exists in SphereImageBackend version 2019-10-03 and earlier, which stems from an incorrect call to Flask's sendfile function leading to absolute path traversal...

PT-2022-20809

Name of the Vulnerable Software and Affected Versions joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the...