{"action":"Upgrade flask-appbuilder to 4.1.3 or later.","affected":[{"fixed":"4.1.3","introduced":"0"}],"component":"flask-appbuilder","cve_ids":["CVE-2022-31177"],"ecosystem":"PyPI","epss":0.00765,"exploited":false,"fixed_versions":["4.1.3"],"ghsa_id":"GHSA-32ff-4g79-vgfc","id":"tcs_01M5KGGRNY2TNGZCRNGME7VB0K","modified_at":"2023-11-08T04:09:28.894172Z","published_at":"2022-08-01T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-247","https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-32ff-4g79-vgfc","https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.1.3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-247","url":"https://osv.dev/vulnerability/PYSEC-2022-247"}],"summary":"Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hash"}