Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Barry-Voice-Assistant 路径遍历漏洞
Vulnerability Description
Barry-Voice-Assistant是保加利亚Lyuboslav Karev个人开发者的一个语音助手。可以帮助您完成日常任务。 Barry-Voice-Assistant 2021-01-18版本及之前版本存在安全漏洞，该漏洞源于Flask 的 send_file函数调用不正确导致绝对路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A