Unrated severityNVD Advisory· Published Jul 11, 2022· Updated Aug 3, 2024

CVE-2022-31518

Description

The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected products

JustAnotherSoftwareDeveloper/Python-Recipe-Databasedescription
JustAnotherSoftwareDeveloper/Python-Recipe-Databasellm-create

Patches

Vulnerability mechanics

References

github.com/github/securitylab/issues/669mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000