Baiduwenkuspider Flaskweb vulnerabilities

1 known vulnerability in Baiduwenkuspider Flaskweb from Baiduwenkuspider Flaskweb Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Baiduwenkuspider Flaskweb: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-31504Jul 11, 2022Baiduwenkuspider Flaskweb ProjectEPSS 1.51%

  The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.