Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-07-11 | CVE-2022-31530 | Path Traversal vulnerability in CSM Server Project CSM Server The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31531 | Path Traversal vulnerability in Dainst Cilantro The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31532 | Path Traversal vulnerability in Travel Blahg Project Travel Blahg The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31533 | Path Traversal vulnerability in Umbral Project Umbral 20200115 The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31534 | Path Traversal vulnerability in Pythonweb Project Pythonweb 20181031 The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31535 | Path Traversal vulnerability in Fishtank Project Fishtank 20150624 The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31536 | Path Traversal vulnerability in Ytdl-Sync Project Ytdl-Sync 20210102 The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31537 | Path Traversal vulnerability in Solar-System-Simulator Project Solar-System-Simulator 20210726 The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31538 | Path Traversal vulnerability in Mp-M08-Interface Project Mp-M08-Interface 20201210 The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |
2022-07-11 | CVE-2022-31539 | Path Traversal vulnerability in Kotekan Project Kotekan The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | 9.3 |