CVE-2022-31523: Path Traversal
Published Jul 11, 2022
·Updated
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely.
Affected Software
1 affected component
PaddlePaddle Anakin<=0.1.1
Event History
Jul 11, 2022
CVE Published
via MITRE·12:55 AM
Data Sourced
via MITRE·12:55 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-31523?
CVE-2022-31523 has a medium severity rating due to the potential for absolute path traversal.
2
How do I fix CVE-2022-31523?
To fix CVE-2022-31523, upgrade PaddlePaddle/Anakin to version 0.1.2 or later.
3
What systems are affected by CVE-2022-31523?
CVE-2022-31523 affects versions of PaddlePaddle/Anakin up to and including 0.1.1.
4
What type of vulnerability is CVE-2022-31523?
CVE-2022-31523 is categorized as an absolute path traversal vulnerability.
5
Can CVE-2022-31523 be exploited remotely?
Yes, CVE-2022-31523 can potentially be exploited remotely if the application is accessible over the internet.