An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, exploitable with a GET request to a /resource-data/<file_path>.txt URI (from views.py), allows attackers to read arbitrary files.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-01-13T00:00:00
Updated: 2024-08-02T22:55:41.043Z
Reserved: 2023-12-31T00:00:00
Link: CVE-2023-52288
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2024-01-13T04:15:08.193
Modified: 2024-01-24T18:40:15.637
Link: CVE-2023-52288
Redhat
No data.