GHSA-RWWX-MFV4-VPRJ vulnerabilities

Vulnerabilities for packages: chromium...

MINI-CX84-VPRJ-XR4R

Bulletin has no description...

MINI-7F4F-93XP-VPRJ

Bulletin has no description...

CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

Path traversal

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31563

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31563

CVE-2022-31563 affects the whmacmac/vprj repository (up to 2022-04-06). It is due to an unsafe use of Flask send_file, enabling absolute path traversal. NVD/V3.1 metrics indicate a high-severity impact with confidentiality loss (C:H) and a base score of 9.3, network attack vector, no privileges r...

PT-2022-20836

Name of the Vulnerable Software and Affected Versions whmacmac/vprj repository through 2022-04-06 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2022-04-06, consider restricting access to the send fi...

VPRJ path traversal vulnerability

vprj is an open source repository for whmacmac. A security vulnerability exists in version 2022-04-06 and earlier versions of vprj, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

CVE-2022-31563: Improper Limitation of a Pathname to a Restricted Directory

The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...