Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1393-1

Опубликовано: 09 сент. 2020
Источник: suse-cvrf

Описание

Security update for python-Flask-Cors

This update for python-Flask-Cors fixes the following issues:

  • CVE-2020-25032: fix a relative directory traversal vulnerability (bsc#1175986).

Список пакетов

openSUSE Leap 15.1
python2-Flask-Cors-3.0.8-lp152.2.3.1
python3-Flask-Cors-3.0.8-lp152.2.3.1
openSUSE Leap 15.2
python2-Flask-Cors-3.0.8-lp152.2.3.1
python3-Flask-Cors-3.0.8-lp152.2.3.1

Ссылки

Описание

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

Затронутые продукты
openSUSE Leap 15.1:python2-Flask-Cors-3.0.8-lp152.2.3.1
openSUSE Leap 15.1:python3-Flask-Cors-3.0.8-lp152.2.3.1
openSUSE Leap 15.2:python2-Flask-Cors-3.0.8-lp152.2.3.1
openSUSE Leap 15.2:python3-Flask-Cors-3.0.8-lp152.2.3.1
Ссылки