Vendors / Bonn Activity Maps Annotation Tool Project Bonn Activity Maps Annotation Tool Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Bonn Activity Maps Annotation Tool Project records in CISA KEV No Bonn Activity Maps Annotation Tool Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.01337 · Published 2022-07-11 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical1 High0 Medium0 Low0 No CVSS0