1. Home
  2. CVE Database
  3. CVE-2022-31528
CRITICAL · 9.3

CVE-2022-31528

The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Vulnerability Description

The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

CVSS Score

9.3

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
Bonn Activity Maps Annotation Tool ProjectBonn Activity Maps Annotation Tool<= 2021-08-31

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2022-31528?

CVE-2022-31528 is a vulnerability with a CVSS score of 9.3 (CRITICAL). The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

How severe is CVE-2022-31528?

CVE-2022-31528 has been rated CRITICAL with a CVSS base score of 9.3/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-31528?

Check the references section above for vendor advisories and patch information. Affected products include: Bonn Activity Maps Annotation Tool Project Bonn Activity Maps Annotation Tool.