Lucene search

K
mageiaGentoo FoundationMGASA-2023-0105
HistoryMar 24, 2023 - 8:55 a.m.

Updated python-flask-security packages fix security vulnerability

2023-03-2408:55:49
Gentoo Foundation
advisories.mageia.org
16

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

36.7%

Open redirect (CVE-2021-23385)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchpython-flask-security< 3.0.0-1.1python-flask-security-3.0.0-1.1.mga8

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

36.7%