deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-31506
Published: 2022-07-11
Description: The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/cmusatyalab/opendiamond/commit/398049c187ee644beabab44d6fece82251c1ea56; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/cmusatyalab/opendiamond/commit/398049c187ee644beabab44d6fece82251c1ea56
CVE: CVE-2022-31507
Published: 2022-07-11
Description: The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/ganga-devs/ganga/commit/730e7aba192407d35eb37dd7938d49071124be8c; https://github.com/ganga-devs/ganga/releases/tag/8.5.10; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31508
Published: 2022-07-11
Description: The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/idayrus/evoting/commit/241d92a4d68f524365a6322b5bbcfaa7d9abc8a3; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31509
Published: 2022-07-11
Description: The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31510
Published: 2022-07-11
Description: The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/sergeKashkin/Simple-RAT/pull/11; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31511
Published: 2022-07-11
Description: The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31512
Published: 2022-07-11
Description: The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31513
Published: 2022-07-11
Description: The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31514
Published: 2022-07-11
Description: The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31515
Published: 2022-07-11
Description: The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31516
Published: 2022-07-11
Description: The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31517
Published: 2022-07-11
Description: The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31518
Published: 2022-07-11
Description: The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31519
Published: 2022-07-11
Description: The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31520
Published: 2022-07-11
Description: The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31521
Published: 2022-07-11
Description: The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31522
Published: 2022-07-11
Description: The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31523
Published: 2022-07-11
Description: The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31524
Published: 2022-07-11
Description: The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31525
Published: 2022-07-11
Description: The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31526
Published: 2022-07-11
Description: The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31527
Published: 2022-07-11
Description: The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31528
Published: 2022-07-11
Description: The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31529
Published: 2022-07-11
Description: The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31530
Published: 2022-07-11
Description: The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31531
Published: 2022-07-11
Description: The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31532
Published: 2022-07-11
Description: The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31533
Published: 2022-07-11
Description: The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31534
Published: 2022-07-11
Description: The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31535
Published: 2022-07-11
Description: The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31536
Published: 2022-07-11
Description: The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31537
Published: 2022-07-11
Description: The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31538
Published: 2022-07-11
Description: The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31539
Published: 2022-07-11
Description: The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31540
Published: 2022-07-11
Description: The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31541
Published: 2022-07-11
Description: The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31542
Published: 2022-07-11
Description: The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31543
Published: 2022-07-11
Description: The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31544
Published: 2022-07-11
Description: The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31545
Published: 2022-07-11
Description: The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31546
Published: 2022-07-11
Description: The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31547
Published: 2022-07-11
Description: The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31548
Published: 2022-07-11
Description: The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31549
Published: 2022-07-11
Description: The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/olmax99/helm-flask-celery/commit/28c985d712d7ac26893433e8035e2e3678fcae9f; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31550
Published: 2022-07-11
Description: The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31551
Published: 2022-07-11
Description: The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31552
Published: 2022-07-11
Description: The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31553
Published: 2022-07-11
Description: The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31554
Published: 2022-07-11
Description: The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31555
Published: 2022-07-11
Description: The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31556
Published: 2022-07-11
Description: The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31557
Published: 2022-07-11
Description: The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31558
Published: 2022-07-11
Description: The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31559
Published: 2022-07-11
Description: The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31560
Published: 2022-07-11
Description: The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31561
Published: 2022-07-11
Description: The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31562
Published: 2022-07-11
Description: The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]
CVE: CVE-2022-31563
Published: 2022-07-11
Description: The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-22
References: https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]; https://github.com/github/securitylab/issues/669#issuecomment[PII_REDACTED]