CVE-2020-25032Alta · CVSS 8.7EPSS 4,02%Corrección disponibleCVE-2020-25032An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.python-flask-corsSistemas operativosActualiza a 3.0.8-2ubuntu0.1Publicación 31 de agosto de 2020Actualización 4 de agosto de 2024Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗