Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-07-11 | CVE-2022-31543 | Path Traversal vulnerability in Setupbox Project Setupbox 1.0 The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31544 | Path Traversal vulnerability in Xtomo Robo-Tom The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31545 | Path Traversal vulnerability in Modelconverter Project Modelconverter 20210426 The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31546 | Path Traversal vulnerability in Glance Project Glance 20140627 The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31547 | Path Traversal vulnerability in Sphere Project Sphere 20200531 The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31548 | Path Traversal vulnerability in Homepage Project Homepage 20170306 The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31549 | Path Traversal vulnerability in Helm-Flask-Celery Project Helm-Flask-Celery The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31550 | Path Traversal vulnerability in Python Athena Stack Project Python Athena Stack 20191108 The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31551 | Path Traversal vulnerability in Flask-Mongo-Skel Project Flask-Mongo-Skel 20121101 The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31552 | Path Traversal vulnerability in Anuvaad-Corpus Project Anuvaad-Corpus 20201123 The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |