Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2026-53610

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send file function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31558

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-20830

Name of the Vulnerable Software and Affected Versions tooxie/shiva-server versions 0.10.0 and earlier Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions 0.10.0 and earlier, consider restricting access to the...

CVE-2022-31558: Improper Limitation of a Pathname to a Restricted Directory

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...