Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AutomatedQuizEval 路径遍历漏洞
Vulnerability Description
AutomatedQuizEval是Sravani Boinepelli个人开发者的一个自动测验评估系统。 GitHub上sravaniboinepelli/AutomatedQuizEval repository 在2020-04-27及以前版本存在安全漏洞，该漏洞源于Flask的send_file函数被不安全地使用，允许绝对路径遍历。
CVSS Information
N/A
Vulnerability Type
N/A