PyPI/flask-appbuilder CVE-2023-34110: low 2.7, EPSS 0.68%

Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error

Action: Upgrade flask-appbuilder to 4.3.2 or later.

pip install flask-appbuilder==4.3.2

Affected

Fixed versions

Sources

• osv: GHSA-jhpr-j7cq-3jp3
• https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-jhpr-j7cq-3jp3
• https://nvd.nist.gov/vuln/detail/CVE-2023-34110
• https://github.com/dpgaspar/Flask-AppBuilder/pull/2045
• https://github.com/dpgaspar/Flask-AppBuilder/commit/ae25ad4c87a9051ebe4a4e8f02aee73232642626
• https://github.com/dpgaspar/Flask-AppBuilder
• https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.2
• https://github.com/pypa/advisory-database/tree/main/vulns/flask-appbuilder/PYSEC-2023-94.yaml

CVE-2023-34110 · published 2023-06-22T19:59:03Z · modified 2025-02-21T05:32:19.573094Z · JSON