CVE-2022-31525: Improper Limitation of a Pathname to a Restricted Directory

The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20850

Name of the Vulnerable Software and Affected Versions audio aligner app versions through 2020-01-10 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

CVE-2022-31588: Improper Limitation of a Pathname to a Restricted Directory

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20857

Name of the Vulnerable Software and Affected Versions sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20848

Name of the Vulnerable Software and Affected Versions duducosmos/livro python repository through 2018-06-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2018-06-06, consider restricting access to t...

PT-2022-20860

Name of the Vulnerable Software and Affected Versions unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the unizar-30226-2019-06/ChangePop-Back repositor...

CVE-2022-31530: Improper Limitation of a Pathname to a Restricted Directory

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31529: Improper Limitation of a Pathname to a Restricted Directory

The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31546: Improper Limitation of a Pathname to a Restricted Directory

The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31575: Improper Limitation of a Pathname to a Restricted Directory

The duducosmos/livropython repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31545: Improper Limitation of a Pathname to a Restricted Directory

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31578: Improper Limitation of a Pathname to a Restricted Directory

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31566: Improper Limitation of a Pathname to a Restricted Directory

The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31543: Improper Limitation of a Pathname to a Restricted Directory

The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579: Improper Limitation of a Pathname to a Restricted Directory

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31586: Improper Limitation of a Pathname to a Restricted Directory

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20806

Name of the Vulnerable Software and Affected Versions freefood89/Fishtank repository through 2015-06-24 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the freefood89/Fishtank repository through 2015-06-24, consider...

CVE-2022-31560: Improper Limitation of a Pathname to a Restricted Directory

The uncleYiba/phototag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

hin-eng-preprocessing path traversal vulnerability

hin-eng-preprocessing is an English parallel corpus of NMT by individual developers in KD, Belarus. It is used to enhance IITB Hindi. A security vulnerability exists in hin-eng-preprocessing version 2019-07-16 and earlier, which stems from an incorrect call to Flask's sendfile function resulting ...

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...