CVE-2022-24776

Опубликовано: 24 мар. 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known workarounds.

Ссылки

https://github.com/dpgaspar/Flask-AppBuilder/pull/1804
Patch
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v3.4.5
Release Notes
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-2ccw-7px8-vmpf
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/pull/1804
Patch
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v3.4.5
Release Notes
Third Party Advisory
https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-2ccw-7px8-vmpf
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*

Версия до 3.4.5 (исключая)

EPSS

Процентиль: 57%

0.00347

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVE-2022-24776

CVSS3: 6.1

debian

почти 4 года назад

Flask-AppBuilder is an application development framework, built on top ...

GHSA-2ccw-7px8-vmpf

CVSS3: 6.1

github

почти 4 года назад

Open Redirect in Flask-AppBuilder

EPSS

Процентиль: 57%

0.00347

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601