PT-2022-20789 · Pallets · Flask

Ghost · Published 2022-07-11 · Updated 2022-07-15 · CVE-2022-31519

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Lukasavicus/WindMill repository version 1.0

Description The issue allows for absolute path traversal due to the unsafe use of the Flask send file function.

Recommendations For version 1.0, consider restricting access to the send file function until a safer implementation is available. As a temporary workaround, review and limit the paths that can be accessed through this function to prevent unauthorized file access.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-31519

Affected Products

Flask

References · 3

• 🔥 https://github.com/github/securitylab/issues/669#issuecomment-1117265726 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-31519 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31519 · Vendor Advisory