Mercadoenlineaback vulnerabilities
1 known vulnerability in Mercadoenlineaback from Mercadoenlineaback Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
Mercadoenlineaback: Improper Limitation of a Pathname to a Restricted Directory
The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.