Ganga Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ganga Project records in CISA KEV

No Ganga Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2022-13432 CVE-2022-31507 · GHSA-7488-6x3r-23w5

MEDIUM 43

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01697 Published 2022-07-11 Fixed in 8.5.10 CWE-22