Sujeetkv vulnerabilities
We track 2 vulnerabilities in Sujeetkv products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2024.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Sujeetkv vulnerabilities
- 7.5 High severity
Flaskcode: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/<file_path> URI (from views.py), allows attackers to write to arbitrary files.
- 7.5 High severity
Flaskcode: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files.