CVE-2022-31581
Published
CVSS v3
9.3
CRITICAL
CVSS v2
6.4
MEDIUM
Affected
2
PROJECTS
Description
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.