corydolphin/flask-cors

corydolphin/flask-cors

GitHubGitHub
GitHubgithub.com
flask-cors.readthedocs.ioflask-cors.readthedocs.io
Releases60
Frequency2 months 1 week
Last Release
Stars933
Cross Origin Resource Sharing ( CORS ) support for Flask
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-25032↗
7.5 HIGH5 MEDIUM

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.