Information Disclosure

flask is vulnerable to Information Disclosure. The vulnerability exists due to the missing Vary cookie header in the savesession function of sessions.py, which leads to the disclosure of the session cookie, or sending data to a client who did not make the request...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-44718 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

DEBIAN-CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-43798 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

Design/Logic Flaw

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

anitya (=1.8.0), enosimulator (>=0.1.0 <=0.3.4) +4 more potentially affected by CVE-2023-30861 via flask (>=2.3.0 <=2.3.1)

flask PYPI version =2.3.0, =0.1.0, =0.2.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2023-30861 Source advisory: OSV:PYSEC-2023-62...

PYSEC-2023-62

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

aaz-dev (>=1.0.2 <=2.10.1), abbr (=0.0.0) +2024 more potentially affected by CVE-2023-30861 via flask (>=0.10.1 <=2.2.4)

flask PYPI version =0.10.1, =1.0.2, =1.8.8, =0.8.44.4, =4.2.0, =1.1.4, =0.4.0, =1.5.2, =0.0.1, =0.26.0, =0.42.0 and more Source cves: CVE-2023-30861 Source advisory: OSV:PYSEC-2023-62...

UBUNTU-CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

PYSEC-2023-62

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861 Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861 Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

Flask vulnerability CVE-2023-30861 arises when a responsive cached by a proxy may include data for one client and serve it to others, potentially leaking a session cookie. Root cause: Flask previously only set the Vary: Cookie header when the session was accessed or modified, not when it was refr...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861 Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

Flask 安全漏洞

Pallets Project Flask is a lightweight WSGI Web Server Gateway Interface application framework from the Pallets Project. A security vulnerability exists in Flask where a data response for one client may be cached and later sent by a proxy to other clients...

aaz-dev (>=1.0.2 <=2.10.1), abbr (=0.0.0) +2024 more potentially affected by CVE-2023-30861 via flask (>=0.10.1 <=2.2.4)

flask PYPI version =0.10.1, =1.0.2, =1.8.8, =0.8.44.4, =4.2.0, =1.1.4, =0.4.0, =1.5.2, =0.0.1, =0.26.0, =0.42.0 and more Source cves: CVE-2023-30861 Source advisory: OSV:GHSA-M2QF-HXJV-5GPQ...

anitya (=1.8.0), enosimulator (>=0.1.0 <=0.3.4) +4 more potentially affected by CVE-2023-30861 via flask (>=2.3.0 <=2.3.1)

flask PYPI version =2.3.0, =0.1.0, =0.2.0, =0.0.26, =0.0.1, =5.2.0.dev799, =5.2.1 Source cves: CVE-2023-30861 Source advisory: OSV:GHSA-M2QF-HXJV-5GPQ...