Baiduwenkuspider Flaskweb Security Vulnerabilities

cve

CVE-2022-31504

The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

9.3CVSS

9.3AI Score

0.003EPSS

2022-07-11 01:15 AM