CVE-2022-31584

The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31584

The CVE-2022-31584 entry concerns the stonethree/s3label repository (GitHub) up to 2019-08-14, where absolute path traversal is possible due to unsafe use of Flask’s send_file. Connected sources corroborate it as a path traversal vulnerability in the file-serving logic, with no explicit remediati...

CVE-2022-31583

The CVE-2022-31583 entry documents a path-traversal vulnerability in the sravaniboinepelli/AutomatedQuizEval repository (through 2020-04-27). The root cause is unsafe use of Flask’s send_file, which allows absolute path traversal and potential access to arbitrary files/directories on the file sys...

CVE-2022-31582

The CVE-2022-31582 entry concerns the shaolo1/VideoServer project (up to 2019-09-21) where Flask's send_file is used insecurely, enabling absolute path traversal. This is the root cause described across multiple sources, including Red Hat and NVD feeds. The vulnerability allows traversal to arbit...

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31581

CVE-2022-31581 affects the scorelab/OpenMF repository. Affected: OpenMF before 2022-05-03. The issue is an absolute path traversal caused by the unsafe use of Flask’s send_file function. Exploit details, affected versions beyond the stated date, and remediation steps are not provided in the conne...

CVE-2022-31580

The CVE-2022-31580 case applies to the caretakerr-api Flask API (Sanoj Tharindu) and is caused by unsafe usage of Flask’s send_file, enabling absolute path traversal. Affected as of 2021-05-17 and earlier builds of caretakerr-api, the vulnerability allows an attacker to access arbitrary files on ...

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31579

The CVE-2022-31579 entry involves the ralphjzhang/iasset repository (through 2022-05-04) with unsafe use of Flask’s send_file, enabling absolute path traversal. Affected component: repository code using Flask send_file; root cause: unsafe file path handling. Potential impact: absolute path traver...

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31578

The CVE-2022-31578 issue affects the piaoyunsoft/bt_lnmp repository (GitHub) where unsafe use of Flask send_file enables absolute path traversal. The root cause is improper filtering of path elements, allowing an attacker to access arbitrary files and directories on the host filesystem. Affected ...

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31577

The longmaoteamtf/audioalignerapp repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31576

CVE-2022-31576 involves the shackerpanel repository. The issue is an absolute path traversal flaw caused by unsafe use of Flask’s send_file function, affecting the project through 2021-05-25. The Red Hat, NVD, CVE listing and related records reiterate the same description. Impact is described as ...

CVE-2022-31575

The CVE-2022-31575 entry concerns the duducosmos/livro_python repository (through 2018-06-06). The vulnerability is an absolute path traversal caused by unsafe use of Flask send_file. Impact is described by NVD CVSS metrics: CVSS v3.1 base score 9.3 (CRITICAL) with network attack vector, no privi...

CVE-2022-31575

The duducosmos/livropython repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31574

CVE-2022-31574 affects the repository deepaliupadhyay/RealEstate (through 2018-11-30 on GitHub). The vulnerability is a path traversal due to the unsafe use of Flask’s send_file function, enabling improper access to files outside the intended directory. Multiple connected sources (NVD, Red Hat, P...

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31572

CVE-2022-31572 affects the ceee-vip/cockybook repository (through 2015-04-16) where absolute path traversal is possible due to unsafe use of Flask send_file. The issue is described as an insecure file access route that can expose files outside the intended directory. CVSS metrics in the initial r...