The dankolbman/travelblahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.3AI score0.01299EPSS
SaveExploits1References2
attackerkb•added 2022/07/11 1:15 a.m.•7 views
CVE-2022-31526
The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
