CVE-2022-31504
Published
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
2
PROJECTS
Description
The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
GitHub