TI-2021-04344 CVE-2021-21241 · GHSA-hh7m-rx4f-4vpv
CSRF can expose users authentication token in Flask-Security-Too
Priority LOW 34
The Python "Flask-Security-Too" package is used for adding security features to your Flask application.
Flask-security-too Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Flask-security-too Project records in CISA KEVNo Flask-security-too Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2023-27010 CVE-2023-49438 · GHSA-672h-6x89-76m5
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows…
Priority LOW 29
An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /regis…