Releases0
Stars4

CVE History

CVEPublishedCVSS v3CVSS v2
9.3 CRITICAL6.4 MEDIUM

The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.