CVE-2024-27083
2 advisories.
PyPI/flask-appbuilder CVE-2024-27083: medium 4.3, EPSS 0.57%
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Action: Upgrade flask-appbuilder to 4.2.1 or later.
pip install flask-appbuilder==4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.4 | 4.2.1 | - |
Fixed versions
| 4.2.1 |
Sources
- osv: GHSA-fqxj-46wg-9v84
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84
- https://nvd.nist.gov/vuln/detail/CVE-2024-27083
- https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812
- https://github.com/dpgaspar/Flask-AppBuilder
CVE-2024-27083 · published · modified · JSON
PyPI/flask-appbuilder CVE-2024-27083: medium 4.3, EPSS 0.57%
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Action: Upgrade flask-appbuilder to 4.2.1 or later.
pip install flask-appbuilder==4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.4 | 4.2.1 | - |
Fixed versions
| 4.2.1 |
Sources
- osv: PYSEC-2026-1381
- https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84
- https://nvd.nist.gov/vuln/detail/CVE-2024-27083
- https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812
- https://github.com/dpgaspar/Flask-AppBuilder
- https://pypi.org/project/flask-appbuilder
- https://github.com/advisories/GHSA-fqxj-46wg-9v84
CVE-2024-27083 · published · modified · JSON