4 matches found
CVE-2022-31527
The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
CVE-2022-31504
The ChangeWeDer/BaiduWenkuSpiderflaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS5.8AI score0.01506EPSS
SaveExploits1References2
20