PT-2023-2566 · Pypi +6 · Flask +6

🗓️ 01 May 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Flask before 2.3.2 or 2.2.5 is vulnerable to cookie caching by proxies; upgrade to 2.3.2+ or 2.2.5+.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: Vulnerability in Flask affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [ CVE-2023-30861]	4 Mar 202509:04	–	ibm
IBM Security Bulletins	Security Bulletin: Session Cookie Exposure via Improper Cache Handling in Flask (≤ v2.3.1, ≤ v2.2.4), affects watsonx.data	8 Apr 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pallets Flask affects IBM Process Mining . CVE-2023-30861	27 Jun 202310:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Flask and Pallets Werkzeug may affect IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2023-30861, CVE-2023-25577, CVE-2023-23934)	19 Jun 202309:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Apr 202416:48	–	ibm

Source	Link
github	www.github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq
github	www.github.com/pallets/flask/commit/70f906c51ce49c485f1d355703e9cc3386b1cc2b
github	www.github.com/pallets/flask/commit/afd63b16170b7c047f5758eb910c416511e9c965
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-30861
osv	www.osv.dev/vulnerability/SUSE-SU-2023:2264-1
osv	www.osv.dev/vulnerability/CVE-2023-30861
osv	www.osv.dev/vulnerability/SUSE-SU-2023:2263-2
osv	www.osv.dev/vulnerability/DLA-3536-1
osv	www.osv.dev/vulnerability/GHSA-m2qf-hxjv-5gpq
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/695335

11 Apr 2025 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 48.7

CVSS 3.17.5

EPSS0.00221

SSVC