Flaskcode vulnerabilities

2 known vulnerabilities in Flaskcode from Sujeetkv. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Flaskcode: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-52289Jan 13, 2024Sujeetkv

  An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a POST request to a /update-resource-data/<file_path> URI (from views.py), allows attackers to write to arbitrary files.

• 7.5 High severity

  Flaskcode: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-52288Jan 13, 2024Sujeetkv

  An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files.