CVE-2022-31573Critical· 9.3▾ MidnightChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 51.2 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
1.4%
The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
chainerrl-visualizer <= 0.1.1Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-1728High· 8.1Gradio allows users to access arbitrary files
CVE-2024-11042Critical· 9.1InvokeAI Arbitrary File Deletion vulnerability
CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
CVE-2024-10833Critical· 9.1DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
CVE-2024-8537Critical· 9.1AgentScope path traversal vulnerability
CVE-2024-8551Critical· 9.1AgentScope path traversal vulnerability in save-workflow