CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31582

The CVE-2022-31582 entry concerns the shaolo1/VideoServer project (up to 2019-09-21) where Flask's send_file is used insecurely, enabling absolute path traversal. This is the root cause described across multiple sources, including Red Hat and NVD feeds. The vulnerability allows traversal to arbit...

PT-2022-20856

Name of the Vulnerable Software and Affected Versions VideoServer versions through 2019-09-21 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2019-09-21, consider restricting access to the send file...

VideoServer 路径遍历漏洞

VideoServer is a python3 UPnP/DLNA video server open source by shaolo1. VideoServer in 2019-09-21 and previous versions of a security vulnerability , the vulnerability stems from Flask's sendfile function is used insecurely to allow absolute path traversal...

CVE-2022-31582: Improper Limitation of a Pathname to a Restricted Directory

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...