critical9.3
CVE-2022-31532
The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Impact
The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Travel Blahg Project | Travel Blahg | through 2016-01-16 |