Skip to content
OpenAdvisories
High USN-6111-1 1 CVE

flask vulnerability

Published May 29, 2023 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Flask incorrectly handled certain data responses.
An attacker could possibly use this issue to expose sensitive information.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS flask 1.1.1-2ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS flask 2.0.1-2ubuntu1.1

Vulnerabilities 1

  • High 7.5
    CVE-2023-30861 Public exploit

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…

    pallets flask python-flask flask Debian Ubuntu Azure Linux PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-30861