Changepop-back vulnerabilities

1 known vulnerability in Changepop-back from Changepop-back Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Changepop-back: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-31586Jul 11, 2022Changepop-back ProjectEPSS 1.34%

  The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.