CVE-2022-31534: Improper Limitation of a Pathname to a Restricted Directory

The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31531: Improper Limitation of a Pathname to a Restricted Directory

The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31530: Improper Limitation of a Pathname to a Restricted Directory

The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

rex-web 路径遍历漏洞

rex-web is a Rexians community website open-sourced by Rexians. A security vulnerability exists in rex-web, which stems from an insecure use of the Flask sendfile function...

orchest 路径遍历漏洞

orchest is an Orchest open source repository . Used to build data pipelines. A path traversal vulnerability exists in versions prior to orchest v2022.05.0, which stems from insecure use of the Flask sendfile function...

PT-2022-20795

Name of the Vulnerable Software and Affected Versions PureStorage-OpenConnect/swagger repository versions 1.1.5 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 1.1.5 and earlier, update to a versi...

PT-2022-20823

Name of the Vulnerable Software and Affected Versions pleomax00/flask-mongo-skel versions through 2012-11-01 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...

testplatform 路径遍历漏洞

testplatform is an open source testing platform for apps by zippies. testplatform has a security vulnerability in 2016-07-19 and earlier versions that stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

OnyxForum 路径遍历漏洞

OnyxForum is an open source forum repository for Space Station 13: Chaotic Onyx. A path traversal vulnerability exists in versions of OnyxForum prior to 2022-05-04, which stems from insecure use of the Flask sendfile function...

PT-2022-20793

Name of the Vulnerable Software and Affected Versions NotVinay/karaokey repository through 2019-12-11 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-12-11, consider restricting access to the sen...

mp-m08-interface 路径遍历漏洞

mp-m08-interface is a repository by the individual developer João Pedro in Brazil. A security vulnerability exists in mp-m08-interface version 2020-12-10 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Solar-system-simulator 路径遍历漏洞

Solar-system-simulator is a simulator of the motion of planets and moons by Jason McGinty, an individual developer in the United States. A security vulnerability exists in Solar-system-simulator version 2021-07-26 and earlier, which stems from an incorrect call to Flask's sendfile function that...

travel_blahg 路径遍历漏洞

travelblahg is a Python framework by Daniel Kolbman, a personal developer in the United States. It is used for tracking travel. A security vulnerability exists in travelblahg version 2016-01-16 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute...

PT-2022-20860

Name of the Vulnerable Software and Affected Versions unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For the unizar-30226-2019-06/ChangePop-Back repositor...

monorepo 路径遍历漏洞

monorepo is an open source movie homepage source repository by cinematic. A security vulnerability exists in monorepo version 2021-03-03 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20771

Name of the Vulnerable Software and Affected Versions operatorequals/wormnest repository version 0.4.7 and earlier Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For operatorequals/wormnest repository version 0.4.7 and...

photo_tag 路径遍历漏洞

phototag is a photo tagging tool by the individual developer of Boring YiBa. A security vulnerability exists in phototag version 2020-08-31 and earlier versions, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

PT-2022-20861

Name of the Vulnerable Software and Affected Versions yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

PT-2022-20786

Name of the Vulnerable Software and Affected Versions Harveyzyh/Python repository versions prior to 2022-05-04 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2022-05-04, consider updating to a versi...