CVE-2022-31177
2 advisories.
PyPI/flask-appbuilder CVE-2022-31177: low 2.7
Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings
Action: Upgrade flask-appbuilder to 4.1.3 or later.
pip install flask-appbuilder==4.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.3 | - |
Fixed versions
| 4.1.3 |
Sources
- osv: GHSA-32ff-4g79-vgfc
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc
- https://nvd.nist.gov/vuln/detail/CVE-2022-31177
- https://github.com/dpgaspar/Flask-AppBuilder
- https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3
- https://github.com/pypa/advisory-database/tree/main/vulns/flask-appbuilder/PYSEC-2022-247.yaml
CVE-2022-31177 · published · modified · JSON
PyPI/flask-appbuilder CVE-2022-31177: unknown
Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hash
Action: Upgrade flask-appbuilder to 4.1.3 or later.
pip install flask-appbuilder==4.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.3 | - |
Fixed versions
| 4.1.3 |
Sources
- osv: PYSEC-2022-247
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc
- https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3
CVE-2022-31177 · published · modified · JSON