NetSight
critical9.3

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used un…

Impact

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected products

VendorProductAffected versions
Python-Flask-Restful-Api ProjectPython-Flask-Restful-Api
through 2019-09-16

Weakness classification

References