Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/02/2024 Updated: 29/02/2024

Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1.

Debian Bug report logs - #1065116 flask-appbuilder: CVE-2024-27083 Package: src:flask-appbuilder; Maintainer for src:flask-appbuilder is Debian Python Team <team+python@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 29 Feb 2024 21:42:01 UTC Severity: important Tags: security, up ...

https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84 https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1065116 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-27083

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect