VYPR

Trainenergyserver

by Trainenergyserver Project

CVEs (1)

  • CVE-2022-31556CriJul 11, 2022
    risk 0.61cvss 9.3epss 0.01

    The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.