Описание
Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If upgrading is not possible, configure one's web server to send the specific HTTP headers for /login per the directions provided in the GitHub Security Advisory.
Уязвимые конфигурации
Конфигурация 1Версия до 4.5.1 (исключая)
cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*
EPSS
Процентиль: 33%
0.00134
Низкий
3.6 Low
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-525
NVD-CWE-Other
Связанные уязвимости
CVSS3: 3.6
debian
больше 1 года назад
Flask-AppBuilder is an application development framework. Prior to ver ...
CVSS3: 3.6
github
больше 1 года назад
Flask-AppBuilder's login form allows browser to cache sensitive fields
EPSS
Процентиль: 33%
0.00134
Низкий
3.6 Low
CVSS3
5.5 Medium
CVSS3
Дефекты
CWE-525
NVD-CWE-Other