592 matches found
GHSA-2CCW-7PX8-VMPF Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 3.4.5 contain an open redirect vulnerability when using the database authentication login page. There are no known workarounds. Users are recommended to upgrade to version 3.4.5 or later. For more...
apache-airflow (>=1.10.3b1, <=1.10.3), dag-manager (>=0.1.3a0, <=0.1.5a0) +3 more potentially affected by CVE-2022-24776 via flask-appbuilder (1.12.3)
flask-appbuilder PYPI version 1.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - apache-airflow =1.10.3b1, =0.1.3a0, =0.5.4rc0, =0.1.0, =3.0.2, =3.0.3 Source cves: CVE-2022-24776 Source advisory:...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=1.0.0, <=1.1.0) +5 more potentially affected by CVE-2022-24776 via flask-appbuilder (1.13.1)
flask-appbuilder PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - airflow-clickhouse-plugin =0.5.1, =1.0.0, =1.10.0, =1.10.4b2, =1.10.6 - dbnd-airflow 0.24.11 - dbnd-airflow-versioned-dag 0.24....
airflow-aggua-plugin (>=1.0.7, <=1.0.8), airflow-clickhouse-plugin (>=0.5.6, <=0.5.7.post1) +98 more potentially affected by CVE-2022-24776 via flask-appbuilder (2.3.4)
flask-appbuilder PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - airflow-aggua-plugin =1.0.7, =0.5.6, =0.1.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =1.10.7rc1, =2020.5.20rc1, =2021.2.5rc1,...
Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 3.4.5 contain an open redirect vulnerability when using the database authentication login page. There are no known workarounds. Users are recommended to upgrade to version 3.4.5 or later. For more...
doc-tour (>=0.1.2, <=0.1.4) potentially affected by CVE-2022-24776 via flask-appbuilder (2.2.2)
flask-appbuilder PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - doc-tour =0.1.2, =0.1.4 Source cves: CVE-2022-24776 Source advisory: OSV:GHSA-2CCW-7PX8-VMPF...
aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +6 more potentially affected by CVE-2022-24776 via flask-appbuilder (>=3.1.1, <=3.4.4)
flask-appbuilder PYPI version =3.1.1, =0.1.0rc3, =2022.9.19, =2.0.0b1, =1.4.0, =5.3.33 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 - neuro-airflow-plugin 0.0.1 Source cves: CVE-2022-24776 Source advisory: GHSA-2CCW-7PX8-VMPF...
apache-airflow-backport-providers-papermill (>=2021.2.5rc1, <=2021.3.3) potentially affected by CVE-2022-24776 via flask-appbuilder (2.2.0)
flask-appbuilder PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - apache-airflow-backport-providers-papermill =2021.2.5rc1, =2021.3.3 Source cves: CVE-2022-24776 Source advisory:...
aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +6 more potentially affected by CVE-2022-24776 via flask-appbuilder (>=3.1.1, <=3.4.4)
flask-appbuilder PYPI version =3.1.1, =0.1.0rc3, =2022.9.19, =2.0.0b1, =1.4.0, =5.3.33 - dataverk-airflow 0.3.12 - gps-building-blocks 1.2.2 - neuro-airflow-plugin 0.0.1 Source cves: CVE-2022-24776 Source advisory: OSV:GHSA-2CCW-7PX8-VMPF...
CVE-2022-24776
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
Open redirect
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
CVE-2022-24776
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
CVE-2022-24776 Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
aglow (>=0.1.0rc3, <=0.1.0rc4), ai-flow (0.3.1) +112 more potentially affected by CVE-2022-24776 via flask-appbuilder (>=1.10.0, <=3.4.4)
flask-appbuilder PYPI version =1.10.0, =0.1.0rc3, =2022.9.19, =1.0.7, =0.5.1, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.1.6, =0.0.2, =1.0.0, =1.10.0, =1.10.3b1, =2.2.5rc2 and more Source cves: CVE-2022-24776 Source advisory: MEND:CVE-2022-24776...
CVE-2022-24776
Removed by vendor...
CVE-2022-24776 Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
CVE-2022-24776 Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...
CVE-2022-24776
Flask-AppBuilder
PT-2022-16871
Name of the Vulnerable Software and Affected Versions Flask-AppBuilder versions prior to 3.4.5 Description Flask-AppBuilder contains an open redirect vulnerability when using the database authentication login page. This issue is fixed in version 3.4.5. There are currently no known workarounds...
CVE-2022-24776: URL Redirection to Untrusted Site
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known...