PyPI/flask-appbuilder CVE-2022-31177: unknown, EPSS 0.77%
Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hash
Action: Upgrade flask-appbuilder to 4.1.3 or later.
pip install flask-appbuilder==4.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.3 | - |
Fixed versions
| 4.1.3 |
Sources
- osv: PYSEC-2022-247
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc
- https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3
CVE-2022-31177 · published · modified · JSON