CVE-2022-31536

Published
View on NVD ↗
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
1
PROJECT

Description

The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Resources related to GitHub Security Lab
GitHubGitHub
1.61K