Skip to content
OpenAdvisories

Vendor

dpgaspar

13 known vulnerabilities.

Products

Flask-AppBuilder 13
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-25128

    Flask-AppBuilder incorrect authentication when using auth type OpenID

    Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This v…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI