Clinical-genomics Security Vulnerabilities

CVE-2022-1554

Path Traversal due to send_file call in GitHub repository clinical-genomics/scout prior to 4.52.

CVE-2022-1592

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...