CVE-2022-31569

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-31569
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that no specific affected product had been identified. Notes: none.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

19 Jul 2022, 02:15

Type Values Removed Values Added
References
  • {'url': 'https://github.com/github/securitylab/issues/669#issuecomment-1117265726', 'name': 'https://github.com/github/securitylab/issues/669#issuecomment-1117265726', 'tags': ['Exploit', 'Issue Tracking', 'Third Party Advisory'], 'refsource': 'MISC'}
Summary The RipudamanKaushikDal/projects repository through 2022-04-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that no specific affected product had been identified. Notes: none.
CPE cpe:2.3:a:projects_project:projects:*:*:*:*:*:*:*:*
CWE CWE-22
CVSS v2 : 6.4
v3 : 9.3 		v2 : unknown
v3 : unknown

15 Jul 2022, 16:45

Type Values Removed Values Added
CPE cpe:2.3:a:projects_project:projects:*:*:*:*:*:*:*:*
CWE CWE-22
References (MISC) https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - (MISC) https://github.com/github/securitylab/issues/669#issuecomment-1117265726 - Exploit, Issue Tracking, Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : 6.4
v3 : 9.3

11 Jul 2022, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-07-11 01:15

Updated : 2024-02-04 22:51

NVD link : CVE-2022-31569

Mitre link : CVE-2022-31569

CVE.ORG link : CVE-2022-31569

JSON object : View

Products Affected

No product.

CWE

No CWE.