Security Advisory

CVE-2020-25032

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-31 03:57:28

Last updated 2024-08-04 15:26:09

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.

← Browse all CVEs View on cve.org ↗