CVE-2022-31518: Improper Limitation of a Pathname to a Restricted Directory

The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31517: Improper Limitation of a Pathname to a Restricted Directory

The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31512: Improper Limitation of a Pathname to a Restricted Directory

The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31511: Improper Limitation of a Pathname to a Restricted Directory

The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31510: Improper Limitation of a Pathname to a Restricted Directory

The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31509: Improper Limitation of a Pathname to a Restricted Directory

The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

hin-eng-preprocessing path traversal vulnerability

hin-eng-preprocessing is an English parallel corpus of NMT by individual developers in KD, Belarus. It is used to enhance IITB Hindi. A security vulnerability exists in hin-eng-preprocessing version 2019-07-16 and earlier, which stems from an incorrect call to Flask's sendfile function resulting ...

CarceresBE Path Traversal Vulnerability

CarceresBE is an SKS parking management system backend open sourced by Delor4. CarceresBE 1.0 and earlier versions have a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly filter special elements in a resource or file path, which could be exploited by...

CVE-2022-31513: Improper Limitation of a Pathname to a Restricted Directory

The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31539: Improper Limitation of a Pathname to a Restricted Directory

The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31542: Improper Limitation of a Pathname to a Restricted Directory

The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

OpenDiamond path traversal vulnerability

opendiamond is an interactive search for non-indexed data open-sourced by cmusatyalab in the United States. A path traversal vulnerability exists in opendiamond version 10.1.1, which stems from insecure use of the Flask sendfile function...

PT-2022-20839

Name of the Vulnerable Software and Affected Versions DSAB-local/DSAB repository versions prior to 2019-02-18 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2019-02-18, consider restricting access t...

CVE-2022-31552: Improper Limitation of a Pathname to a Restricted Directory

The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31534: Improper Limitation of a Pathname to a Restricted Directory

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31536: Improper Limitation of a Pathname to a Restricted Directory

The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31522: Improper Limitation of a Pathname to a Restricted Directory

The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Umbral path traversal vulnerability

umbral is a NuCypher API open-sourced by decentraminds.ai for applying proxy re-encryption on decentralized marketplaces. A security vulnerability exists in umbral version 2020-01-15 and earlier, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

CVE-2022-31520: Improper Limitation of a Pathname to a Restricted Directory

The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31526: Improper Limitation of a Pathname to a Restricted Directory

The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...