Vulnerabilities (CVE)

Filtered by vendor Cmu Subscribe
Filtered by product Opendiamond
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-31506 1 Cmu 1 Opendiamond 2023-12-10 6.4 MEDIUM 9.3 CRITICAL
The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.