Skip to content
OpenAdvisories

Package · Ubuntu

flower

1 known vulnerabilities.

1 result · Feed

  • High 8.6

    Flower OAuth authentication bypass

    Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting dow…