Skip to content
OpenAdvisories

Package · Debian

python-flask-cors

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-25032

    Flask-Cors Directory Traversal vulnerability

    An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

    flask-cors python-flask-cors python-flask-cors Debian Ubuntu PyPI