Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•5 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/07/11 1:15 a.m.•13 views

CVE-2022-31588

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-31588: Improper Limitation of a Pathname to a Restricted Directory

The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•4 views

PT-2022-20862

Name of the Vulnerable Software and Affected Versions zippies/testplatform versions through 2016-07-19 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions through 2016-07-19, consider restricting access to the se...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rows per page
Query Builder