Lucene search
+L
Modelconverter ProjectModelconverter

1 matches found

CVE
CVE
added 2022/07/11 12:58 a.m.72 views

CVE-2022-31545

The CVE-2022-31545 vulnerability affects the ml-inory/ModelConverter repository (up to 2021-04-26). It is caused by unsafe usage of Flask send_file, enabling absolute path traversal. The public description explicitly states this leads to path traversal in that repository.

9.3CVSS9.3AI score0.01272EPSS
Save