Lucene search

K
cvelistMitreCVELIST:CVE-2022-31504
HistoryJul 11, 2022 - 12:53 a.m.

CVE-2022-31504

2022-07-1100:53:50
mitre
www.cve.org
4
github
repository
path traversal
vulnerability
flask
send file

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

67.9%

The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

67.9%

Related for CVELIST:CVE-2022-31504