sphere 路径遍历漏洞

sphere is a Python library that implements the Brain Command Interface System by the individual developer Noam Ezekiel. A security vulnerability exists in sphere version 2020-05-31 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

s3label 路径遍历漏洞

S3Label is an open source browser-based tool for quickly labeling images from Stone Three. A path traversal vulnerability exists in s3label on 2019-08-14 and prior versions, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

iasset 路径遍历漏洞

iasset is a repository by Ralph Zhang, a personal developer. iasset has a security vulnerability in version 2022-05-04 and earlier that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

movie-review-sentiment-analysis 路径遍历漏洞

movie-review-sentiment-analysis is used by Rohit Nayak, an individual developer, to perform sentiment analysis on IMDB movie reviews in order to categorize them as positive or negative reviews. A security vulnerability exists in movie-review-sentiment-analysis version 2017-05-07 and earlier, whic...

Fishtank 路径遍历漏洞

Fishtank is a remote monitoring and control interface by Rentaro Matsukata, a personal developer in the U.S. A path traversal vulnerability exists in Fishtank 2015-06-24 and earlier versions, which stems from a failure of Flask's sendfile function to properly filter special elements in resource o...

internshipsystem 路径遍历漏洞

internshipsystem is a student internship system for schools by wlwl individual developers. A security vulnerability exists in internshipsystem version 2018-05-22 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

shiva-server 路径遍历漏洞

shiva-server is a repository for Alvaro Personal Developers. A security vulnerability exists in shiva-server version 0.10.0 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

RealEstate 路径遍历漏洞

RealEstate is a repository for deepaliupadhyay individual developers. RealEstate has a security vulnerability that stems from the insecure use of the Flask sendfile function...

rex-web 路径遍历漏洞

rex-web is a Rexians community website open-sourced by Rexians. A security vulnerability exists in rex-web, which stems from an insecure use of the Flask sendfile function...

DSAB 路径遍历漏洞

DSAB is a dataflow algorithm benchmark. A benchmark designed to test the performance of various dataflow algorithms on multiple datasets in a simple way.DSAB suffers from a path traversal vulnerability that stems from the failure of the Flask sendfile function to properly filter special elements ...

usap-dc-website 路径遍历漏洞

usap-dc-website is an open source repository for usap-dc website by Interdisciplinary Earth Data Alliance. It includes a javascript client application and a python/flask server. A path traversal vulnerability exists in usap-dc-website version 1.0.1, which stems from insecure use of the Flask...

DLS 路径遍历漏洞

DLS is a GUI-based deep learning platform open-sourced by SummaLabs. DLS version 0.1.0 and previous versions have a security vulnerability , the vulnerability stems from Flask sendfile function call incorrectly leads to absolute path traversal...

orchest 路径遍历漏洞

orchest is an Orchest open source repository . Used to build data pipelines. A path traversal vulnerability exists in versions prior to orchest v2022.05.0, which stems from insecure use of the Flask sendfile function...

CVE-2022-31535: Improper Limitation of a Pathname to a Restricted Directory

The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31530: Improper Limitation of a Pathname to a Restricted Directory

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31521: Improper Limitation of a Pathname to a Restricted Directory

The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31506: Improper Limitation of a Pathname to a Restricted Directory

The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31504: Improper Limitation of a Pathname to a Restricted Directory

The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31539: Improper Limitation of a Pathname to a Restricted Directory

The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31531: Improper Limitation of a Pathname to a Restricted Directory

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...