CVE-2022-31507

Published
View on NVD ↗
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
2
PROJECTS

Description

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Resources related to GitHub Security Lab
GitHubGitHub
1.61K
Ganga is an easy-to-use frontend for job definition and management
GitHubGitHub
112