A AegiFlow
CRITICALCVSS 9.3EPSS 1.4%

CVE-2022-31573

ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function

Published
2022-07-12
Modified
2026-10-27
EPSS percentile
72%
Aliases
GHSA-687h-86vc-5x59
Sources
github-advisory

Summary

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPIchainerrl-visualizer——

Remediation: No patched version is listed by GitHub.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.