CVE-2022-31507
Published
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
2
PROJECTS
Description
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.