CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582

The CVE-2022-31582 entry concerns the shaolo1/VideoServer project (up to 2019-09-21) where Flask's send_file is used insecurely, enabling absolute path traversal. This is the root cause described across multiple sources, including Red Hat and NVD feeds. The vulnerability allows traversal to arbit...