Lucene search

K
redhatRedHatRHSA-2023:3525
HistoryJun 07, 2023 - 7:35 a.m.

(RHSA-2023:3525) Important: python-flask security update

2023-06-0707:35:10
access.redhat.com
12
python
flask
security
update
disclosure
permanent session cookie
cve-2023-30861
web development
framework
werkzeug
wsgi
jinja 2
cvss score
acknowledgments
references

0.001 Low

EPSS

Percentile

49.6%

Flask is a lightweight but extensible web development framework for Python based on the Werkzeug WSGI toolkit, and the Jinja 2 template engine.

Security Fix(es):

  • flask: Possible disclosure of permanent session cookie due to missing Vary: Cookie header (CVE-2023-30861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat7noarchpython-flask< 0.10.1-7.el7_9python-flask-0.10.1-7.el7_9.noarch.rpm