Description
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | flask-admin | < 1.5.3 | 1.5.3 | GHSA-894g-6j7q-2hx6 |
References
- https://github.com/flask-admin/flask-admin/pull/1699
- FEDORA-2020-e8f384af5f vendor-advisory
- FEDORA-2020-4aaf6e6d7c vendor-advisory