CVE:CVE-2020-25032
CNNVD:CNNVD-202008-1438
Flask-CORS是Flask的跨源资源共享组件。
Flask-CORS 3.0.9版本之前存在路径遍历漏洞，攻击者可以利用该漏洞访问专有数据。
solution:Upgrade flask-cors_project flask-cors to a higher version than 3.0.9,and avoid the version (,3.0.9); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,15.0:sp2,and avoid the version 15.0:sp1,15.0:sp2; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2