Security Advisory

CVE-2022-31558

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-11 00:59:36
Last updated 2024-08-03 07:19:06
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.