Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2022-07-11 CVE-2022-31523 Path Traversal vulnerability in Paddlepaddle Anakin 0.1.0/0.1.1
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
paddlepaddle CWE-22
critical
9.3
2022-07-11 CVE-2022-31524 Path Traversal vulnerability in Purestorage Pure Swagger
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
purestorage CWE-22
critical
9.3
2022-07-11 CVE-2022-31525 Path Traversal vulnerability in Deep Learning Studio Project Deep Learning Studio 0.1.0
The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
deep-learning-studio-project CWE-22
critical
9.3
2022-07-11 CVE-2022-31526 Path Traversal vulnerability in Thunderatz Thunderdocs 20200501
The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
thunderatz CWE-22
critical
9.3
2022-07-11 CVE-2022-31527 Path Traversal vulnerability in Flask-File-Server Project Flask-File-Server
The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
flask-file-server-project CWE-22
critical
9.3
2022-07-11 CVE-2022-31528 Path Traversal vulnerability in Bonn Activity Maps Annotation Tool Project Bonn Activity Maps Annotation Tool
The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
bonn-activity-maps-annotation-tool-project CWE-22
critical
9.3
2022-07-11 CVE-2022-31529 Path Traversal vulnerability in Monorepo Project Monorepo
The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
monorepo-project CWE-22
critical
9.3
2022-07-11 CVE-2022-31530 Path Traversal vulnerability in CSM Server Project CSM Server
The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
csm-server-project CWE-22
critical
9.3
2022-07-11 CVE-2022-31531 Path Traversal vulnerability in Dainst Cilantro
The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
dainst CWE-22
critical
9.3
2022-07-11 CVE-2022-31532 Path Traversal vulnerability in Travel Blahg Project Travel Blahg
The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
network
low complexity
travel-blahg-project CWE-22
critical
9.3