Filtered by vendor Iedadata Subscriptions
Filtered by product Usap-dc Web Submission And Dataset Search Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-31509 1 Iedadata 1 Usap-dc Web Submission And Dataset Search 2024-08-03 9.3 Critical
The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.