SUSE-SU-2023:2264-1 Security update for python-Flask

This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching bsc1211246...

SUSE-SU-2023:2263-1 Security update for python-Flask

This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching bsc1211246...

SUSE: Security Advisory (SUSE-SU-2023:2264-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2023-1399 Malicious code in req-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1a249da7f5d65ac080890111e76921348e8eadbfca48a449be1319f9c65982c The OpenSSF Package Analysis project identified 'req-flask' @ 2.9.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in req-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1a249da7f5d65ac080890111e76921348e8eadbfca48a449be1319f9c65982c The OpenSSF Package Analysis project identified 'req-flask' @ 2.9.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in matplotlib-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cce6ca7d9ce0af312425dec9ae608529c322b940526b20135cdcd8673ba31c The OpenSSF Package Analysis project identified 'matplotlib-flask' @ 7.15.10 pypi as malicious. It is considered malicious because: - The packag...

MAL-2023-1376 Malicious code in matplotlib-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cce6ca7d9ce0af312425dec9ae608529c322b940526b20135cdcd8673ba31c The OpenSSF Package Analysis project identified 'matplotlib-flask' @ 7.15.10 pypi as malicious. It is considered malicious because: - The packag...

Malicious code in requests-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c161ba3569bb42a4df0893e7bcb73dff9fc8371d01638f7fe27ecdf9011074f0 The OpenSSF Package Analysis project identified 'requests-flask' @ 16.9.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1402 Malicious code in requests-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c161ba3569bb42a4df0893e7bcb73dff9fc8371d01638f7fe27ecdf9011074f0 The OpenSSF Package Analysis project identified 'requests-flask' @ 16.9.16 pypi as malicious. It is considered malicious because: - The package...

Security Bulletin: Multiple Vulnerabilities in Multicloud Management Security Services

Summary Multiple vulnerabilities were fixed in IBM Cloud Pak for Multicloud Management Security Services Vulnerability Details CVEID:CVE-2022-31512 DESCRIPTION: flask-mvc could allow a remote attacker to traverse directories on the system, caused by the Flask sendfile function being used unsafely...

SUSE CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

CVE-2023-30861

A flaw was found in the Python Flask package. A cached response may contain data for one client sent by a proxy to other clients, including session cookies, resulting in the compromise of data confidentiality contained in the leak requests or cookies. This happens when the following conditions ar...

The vulnerability of the Flask framework lies in its ability to send a single client’s cookie session file to other users, allowing an attacker to access protected information.

The vulnerability of the Flask framework lies in the ability to send a session cookie file from one client to other users. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information...

Information Disclosure

flask is vulnerable to Information Disclosure. The vulnerability exists due to the missing Vary cookie header in the savesession function of sessions.py, which leads to the disclosure of the session cookie, or sending data to a client who did not make the request...

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-43798 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

AZL-44718 CVE-2023-30861 affecting package python-flask 1.1.1-4

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

DEBIAN-CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

Design/Logic Flaw

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches Set-Cookie headers, it may send one client's session...

aaz-dev (>=1.0.2 <=2.10.1), abbr (=0.0.0) +2024 more potentially affected by CVE-2023-30861 via flask (>=0.10.1 <=2.2.4)

flask PYPI version =0.10.1, =1.0.2, =1.8.8, =0.8.44.4, =4.2.0, =1.1.4, =0.4.0, =1.5.2, =0.0.1, =0.26.0, =0.42.0 and more Source cves: CVE-2023-30861 Source advisory: OSV:PYSEC-2023-62...