Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Python-Recipe-Database 路径遍历漏洞
Vulnerability Description
Python-Recipe-Database是使用 Python 和 Mongo 的配方存储和检索系统。 Python-Recipe-Database 2021-03-31版本及之前版本存在路径遍历漏洞，该漏洞源于Flask 的 send_file函数调用不正确导致绝对路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A