{"action":"Upgrade flask-appbuilder to 4.3.2 or later.","affected":[{"fixed":"4.3.2","introduced":"0"}],"component":"flask-appbuilder","cve_ids":["CVE-2023-34110"],"ecosystem":"PyPI","epss":0.00676,"exploited":false,"fixed_versions":["4.3.2"],"ghsa_id":"GHSA-jhpr-j7cq-3jp3","id":"tcs_01M5KFP0NH8A33B6AZGJ6E9F61","modified_at":"2025-02-21T05:32:19.573094Z","published_at":"2023-06-22T19:59:03Z","references":["https://osv.dev/vulnerability/GHSA-jhpr-j7cq-3jp3","https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-jhpr-j7cq-3jp3","https://nvd.nist.gov/vuln/detail/CVE-2023-34110","https://github.com/dpgaspar/Flask-AppBuilder/pull/2045","https://github.com/dpgaspar/Flask-AppBuilder/commit/ae25ad4c87a9051ebe4a4e8f02aee73232642626","https://github.com/dpgaspar/Flask-AppBuilder","https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.2","https://github.com/pypa/advisory-database/tree/main/vulns/flask-appbuilder/PYSEC-2023-94.yaml"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-jhpr-j7cq-3jp3","url":"https://osv.dev/vulnerability/GHSA-jhpr-j7cq-3jp3"}],"summary":"Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error"}