FlaskBlog app vulnerability CVE-2024-22414. Improper rendering allows execution of arbitrary javascript code. Removing `|safe` tag from `user.html` template is the remedy. No available fix, manual edits required.
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | Design/Logic Flaw | 17 Jan 202421:15 | – | prion |
![]() | CVE-2024-22414 | 17 Jan 202421:15 | – | nvd |
![]() | CVE-2024-22414 | 17 Jan 202421:15 | – | cve |
![]() | CVE-2024-22414 User profile page vulnerable to Cross Site Scripting (XSS) in flaskBlog | 17 Jan 202420:25 | – | cvelist |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo