mitsuhiko / flask-pastebin Goto Github PK

For more information, please see OWASP and StackOverflow

In https://github.com/mitsuhiko/flask-pastebin/blob/master/pastebin.py#L140

Vulnerability 4:
File: flask-pastebin/pastebin.py
 > User input at line 140, trigger word "get(": 
	next_url = request.args.get('next') or url_for('new_paste')
File: flask-pastebin/pastebin.py
 > reaches line 143, trigger word "redirect(": 
	¤call_2 = ret_redirect(next_url)

Vulnerability 5:
File: flask-pastebin/pastebin.py
 > User input at line 140, trigger word "get(": 
	next_url = request.args.get('next') or url_for('new_paste')
File: flask-pastebin/pastebin.py
 > reaches line 159, trigger word "redirect(": 
	¤call_10 = ret_redirect(next_url)

This issue was found with PyT

Hi, I'm trying to run this example, but when I execute in terminal:
juggernaut
it responds:
/usr/lib/node_modules/juggernaut/lib/juggernaut/server.js:12 if (path.existsSync(keysPath + "/privatekey.pem") && path.existsSync(keysPath + "/certificate.pem")) { ^ TypeError: path.existsSync is not a function at Object.<anonymous> (/usr/lib/node_modules/juggernaut/lib/juggernaut/server.js:12:10) at Module._compile (module.js:541:32) at Object.Module._extensions..js (module.js:550:10) at Module.load (module.js:458:32) at tryModuleLoad (module.js:417:12) at Function.Module._load (module.js:409:3) at Module.require (module.js:468:17) at require (internal/module.js:20:19) at Object.<anonymous> (/usr/lib/node_modules/juggernaut/lib/juggernaut/index.js:4:15) at Module._compile (module.js:541:32)

Do you know how to solve it?

Thanks a lot