8 matches found
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31588
CVE-2022-31588 describes an absolute path traversal flaw in the zippies/testplatform repository (pre-2016-07-19) caused by unsafe use of Flask’s send_file function. The vulnerability arises from how file paths are handled, enabling an attacker to access arbitrary files on the server. Public refer...
CVE-2022-31588
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
PT-2022-20862
Name of the Vulnerable Software and Affected Versions zippies/testplatform versions through 2016-07-19 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-07-19, consider restricting access to the se...
CVE-2022-31588: Improper Limitation of a Pathname to a Restricted Directory
The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...