CVEDB API

The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 63.1%

CVSS Severity

CVSS v3 Score 9.3

CVSS v2 Score 6.4

References

Products affected by CVE-2022-31502

Wormnest Project » Wormnest » Version: 0.0.1

cpe:2.3:a:wormnest_project:wormnest:0.0.1
Wormnest Project » Wormnest » Version: 0.0.2

cpe:2.3:a:wormnest_project:wormnest:0.0.2
Wormnest Project » Wormnest » Version: 0.1.0

cpe:2.3:a:wormnest_project:wormnest:0.1.0
Wormnest Project » Wormnest » Version: 0.2.4

cpe:2.3:a:wormnest_project:wormnest:0.2.4
Wormnest Project » Wormnest » Version: 0.3.0

cpe:2.3:a:wormnest_project:wormnest:0.3.0
Wormnest Project » Wormnest » Version: 0.3.1

cpe:2.3:a:wormnest_project:wormnest:0.3.1
Wormnest Project » Wormnest » Version: 0.3.3

cpe:2.3:a:wormnest_project:wormnest:0.3.3
Wormnest Project » Wormnest » Version: 0.3.4

cpe:2.3:a:wormnest_project:wormnest:0.3.4
Wormnest Project » Wormnest » Version: 0.3.5

cpe:2.3:a:wormnest_project:wormnest:0.3.5
Wormnest Project » Wormnest » Version: 0.4.0

cpe:2.3:a:wormnest_project:wormnest:0.4.0
Wormnest Project » Wormnest » Version: 0.4.1

cpe:2.3:a:wormnest_project:wormnest:0.4.1
Wormnest Project » Wormnest » Version: 0.4.3

cpe:2.3:a:wormnest_project:wormnest:0.4.3
Wormnest Project » Wormnest » Version: 0.4.4

cpe:2.3:a:wormnest_project:wormnest:0.4.4
Wormnest Project » Wormnest » Version: 0.4.5

cpe:2.3:a:wormnest_project:wormnest:0.4.5
Wormnest Project » Wormnest » Version: 0.4.6

cpe:2.3:a:wormnest_project:wormnest:0.4.6
Wormnest Project » Wormnest » Version: 0.4.7

cpe:2.3:a:wormnest_project:wormnest:0.4.7