Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
shackerpanel 路径遍历漏洞
Vulnerability Description
shackerpanel是heidi-luong1109个人开发者的一个简单但功能强大的控制面板。可以通过基于Web的GUI(图形用户界面)来管理Web服务器。 shackerpanel 在2021-05-25及以前版本存在安全漏洞,该漏洞源于Flask的send_file函数被不安全地使用,允许绝对路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A