Baiduwenkuspider Flaskweb Project vulnerabilities
We track 1 vulnerability in Baiduwenkuspider Flaskweb Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2022.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Baiduwenkuspider Flaskweb Project vulnerabilities
- 9.3 Critical severity
Baiduwenkuspider Flaskweb: Improper Limitation of a Pathname to a Restricted Directory
The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.