CVE-2022-31560

The uncleYiba/phototag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31560

The uncleYiba/phototag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31560

The CVE-2022-31560 entry concerns the uncleYiba/photo_tag repository (up to 2020-08-31). The root cause is unsafe usage of Flask’s send_file, enabling absolute path traversal. The vulnerability manifests as a path traversal issue (no exploits or vectors described beyond this in the provided docs)...