{"action":"Upgrade flask-appbuilder to 4.3.2 or later.","affected":[{"fixed":"4.3.2","introduced":"0"}],"component":"flask-appbuilder","cve_ids":["CVE-2023-34110"],"ecosystem":"PyPI","epss":0.00676,"exploited":false,"fixed_versions":["4.3.2"],"ghsa_id":"GHSA-jhpr-j7cq-3jp3","id":"tcs_01M5KGKV22TZ01Z8GNBBD0EK4Y","modified_at":"2023-11-08T04:12:44.362034Z","published_at":"2023-06-22T23:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-94","https://github.com/dpgaspar/Flask-AppBuilder/commit/ae25ad4c87a9051ebe4a4e8f02aee73232642626","https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.2","https://github.com/dpgaspar/Flask-AppBuilder/pull/2045","https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-jhpr-j7cq-3jp3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-94","url":"https://osv.dev/vulnerability/PYSEC-2023-94"}],"summary":"Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on"}