Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: dpgaspar Component: Flask-appbuilder Clear all filters
TI-2023-13466 CVE-2023-29005 · GHSA-9hcr-9hcv-x6pv

No Rate Limiting on Login AUTH DB

Priority MEDIUM 40

Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00629 Published 2023-04-10 Fixed in 4.3.0 CWE-307
TI-2022-08590 CVE-2022-24776 · GHSA-2ccw-7px8-vmpf

Open Redirect in Flask-AppBuilder

Priority LOW 29

Flask-AppBuilder is an application development framework, built on top of the Flask web framework.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00968 Published 2022-03-24 Fixed in 3.4.5 CWE-601
TI-2022-06037 CVE-2022-21659 · GHSA-wfjw-w6pv-8p7f

Observable Response Discrepancy in Flask-AppBuilder

Priority LOW 32

Flask-AppBuilder is an application development framework, built on top of the Flask web framework.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00953 Published 2022-01-31 Fixed in 3.4.4 CWE-203
TI-2021-18097 CVE-2021-41265 · GHSA-m3rf-7m4w-r66q

Improper Authentication in Flask-AppBuilder

Priority MEDIUM 41

Flask-AppBuilder is a development framework built on top of Flask.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01317 Published 2021-12-09 Fixed in 3.3.4 CWE-287