Lucene search
PRIOn knowledge basePRION:CVE-2023-29005HistoryApr 10, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-04-1021:15:00
PRIOn knowledge base
www.prio-n.com
5
flask-appbuilder
rate limiting
brute-force
user credentials
nvd
Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to enable rate limiting using AUTH_RATE_LIMITED = True, RATELIMIT_ENABLED = True, and setting an AUTH_RATE_LIMIT.
Related
ubuntucve
ubuntucve
CVE-2023-29005
2023-04-10 00:00:00
nvd
nvd
CVE-2023-29005
2023-04-10 21:15:07
gitlab
gitlab
Improper Restriction of Excessive Authentication Attempts
2023-04-10 00:00:00
github
github
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
2023-04-10 16:37:40
cvelist
cvelist
CVE-2023-29005 No Rate Limiting on Login AUTH DB
2023-04-10 20:47:17
osv
osv
CVE-2023-29005
2023-04-10 21:15:07
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
2023-04-10 16:37:40
debiancve
debiancve
CVE-2023-29005
2023-04-10 21:15:07
cve
cve
CVE-2023-29005
2023-04-10 21:15:07
veracode
veracode
Brute Force Attack
2023-04-18 13:56:31