Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:33 p.m.•12 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS7AI score0.01337EPSS
SaveExploits1References1
NVD
NVD
•added 2022/07/11 1:15 a.m.•33 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01337EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/07/11 1:15 a.m.•13 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•5 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/11 1:02 a.m.•84 views

CVE-2022-31588

CVE-2022-31588 describes an absolute path traversal flaw in the zippies/testplatform repository (pre-2016-07-19) caused by unsafe use of Flask’s send_file function. The vulnerability arises from how file paths are handled, enabling an attacker to access arbitrary files on the server. Public refer...

9.3CVSS8.1AI score0.01337EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/11 1:02 a.m.•40 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.6AI score0.01337EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•4 views

PT-2022-20862

Name of the Vulnerable Software and Affected Versions zippies/testplatform versions through 2016-07-19 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-07-19, consider restricting access to the se...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•10 views

CVE-2022-31588: Improper Limitation of a Pathname to a Restricted Directory

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Rows per page
Query Builder