3 matches found
CVE-2022-31564
The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS0.01411EPSS
SaveExploits0References4
CVE-2022-31564: Improper Limitation of a Pathname to a Restricted Directory
The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
9.3CVSS8.2AI score0.01411EPSS
SaveExploits0References2
PT-2022-20837
Name of the Vulnerable Software and Affected Versions woduq1414/munhak-moa versions prior to 2022-05-03 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended directory...
9.3CVSS0.01411EPSS
SaveExploits0References6
20