mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 02:31:38 +00:00
700 B
700 B
CVE-2022-31510
Description
The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
POC
Reference
- https://github.com/github/securitylab/issues/669#issuecomment-1117265726
- https://github.com/sergeKashkin/Simple-RAT/pull/11
Github
No PoCs found on GitHub currently.