Glance Project Glance
4 CVEs affecting Glance Project Glance. Latest disclosed: 2023-02-13. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31546 | Critical | 9.3 | 2022-07-11 | The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-25937 | Medium | 6.5 | 2023-02-13 | Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory. This is re… |
CVE-2018-3715 | Medium | 6.5 | 2018-06-07 | glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to re… |
CVE-2018-3748 | Medium | 6.1 | 2018-07-03 | There is a Stored XSS vulnerability in the glance node module versions <= 3.0.5. File name, which contains malicious HTML (eg. embedded iframe element or javas… |