Flask-yeoman Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flask-yeoman Project records in CISA KEV

No Flask-yeoman Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-13484 CVE-2022-31559 · GHSA-fmr5-qw46-rqmv

MEDIUM 43

The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01245 Published 2022-07-11 No fix listed CWE-22