exploitDog

GHSA-w2jx-mj4v-3vrh

Опубликовано: 12 июл. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.3

Описание

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Ссылки

EPSS

Процентиль: 62%

0.00432

Низкий

9.3 Critical

CVSS3

CVE ID

Дефекты

CWE-22

Связанные уязвимости

CVE-2022-31519

CVSS3: 9.3

nvd

больше 3 лет назад

The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

EPSS

Процентиль: 62%

0.00432

Низкий

9.3 Critical

CVSS3

CVE ID

Дефекты

CWE-22