critical9.8
CVE-2022-31570
The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsa…
Impact
The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ceneo-Web-Scrapper Project | Ceneo-Web-Scrapper | through 2021-03-15 |