Flask-file-server Project vulnerabilities
We track 1 vulnerability in Flask-file-server Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2022.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Flask-file-server Project vulnerabilities
- 9.3 Critical severity
Flask-file-server: Improper Limitation of a Pathname to a Restricted Directory
The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.