Description
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Unscored
CVE-2022-31581
EUVD-2022-53035GHSA-h4qx-5r3w-4j5v
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsa…
Published Jul 11, 2022 · Updated Aug 3, 2024 · Assigned by mitre