Changepop-back Project vulnerabilities
We track 1 vulnerability in Changepop-back Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2022.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Changepop-back Project vulnerabilities
- 9.3 Critical severity
Changepop-back: Improper Limitation of a Pathname to a Restricted Directory
The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.