CVE-2022-31501
Published
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
2
PROJECTS
Description
The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
GitHub