← All advisories

Unrated severityNVD Advisory· Published Jul 11, 2022· Updated Aug 3, 2024

CVE-2022-31581

CVE-2022-31581

Description

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected products

2

scorelab/OpenMFdescription
scorelab/OpenMFllm-create
Range: <unfixed (before 2022-05-03)

Patches

Vulnerability mechanics

References

2

github.com/github/securitylab/issues/669mitrex_refsource_MISC
github.com/scorelab/OpenMF/issues/262mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.