CVE-2022-31524

2022-07-1100:55:49

mitre

www.cve.org

github

security vulnerability

purestorage-openconnect/swagger

flask send_file function

absolute path traversal

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

References

github.com/github/securitylab/issues/669#issuecomment-1117265726