Flask-mvc Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flask-mvc Project records in CISA KEV

No Flask-mvc Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Flask-mvc · all components

TI-2022-13437 CVE-2022-31512 · GHSA-pgr9-jh2q-25mp

MEDIUM 43

The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01375 Published 2022-07-11 No fix listed CWE-22