CVE-2022-31509

CVE-2022-31509 affects the repository iedadata/usap-dc-website (version ≤ 1.0.1). The vulnerability is an absolute path traversal created by unsafe use of Flask’s send_file function, enabling traversal of server filesystem paths. The issue is documented across multiple sources (NVD, Red Hat, OSV,...