Lucene search
+L

4 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.7 views

PYSEC-2026-1387 Path traversal in flaskcode

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS6.1AI score0.00718EPSS
SaveExploits0References4
OSV
OSV
added 2024/01/13 6:30 a.m.46 views

GHSA-V3RG-QM46-XRG9 Path traversal in flaskcode

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

7.5CVSS6AI score0.00718EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/13 4:15 a.m.22 views

Directory traversal

An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/ URI from views.py, allows attackers to write to arbitrary files...

5CVSS7.3AI score0.00718EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/12 12:0 a.m.11 views

PT-2024-14506

Name of the Vulnerable Software and Affected Versions flaskcode versions through 0.0.8 Description An issue was discovered that allows for unauthenticated directory traversal, which can be exploited with a POST request to the "/update-resource-data/" API endpoint. This enables attackers to write ...

7.5CVSS7.2AI score0.00718EPSS
SaveExploits0References8
Rows per page
Query Builder