Skip to content
OpenAdvisories

Product · dpgaspar

Flask-AppBuilder

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2023-29005

    No Rate Limiting on Login AUTH DB

    Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to enable rate limiting using `AUTH_RATE_LIMITED = True`, `RATELIMIT_ENABLED = True`, and setting an `AUT…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI
  • High 8.1
    CVE-2021-41265

    Improper Authentication in Flask-AppBuilder

    Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successfully authenticate an…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI
  • High 7.2
    CVE-2021-32805

    URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder

    Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI