forge-event-chain (>=0.1.1, <=0.27.0) potentially affected by CVE-2021-29621 via flask-appbuilder (1.10.0)

flask-appbuilder PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-appbuilder and may be impacted: - forge-event-chain =0.1.1, =0.27.0 Source cves: CVE-2021-29621 Source advisory: OSV:GHSA-434H-P4GX-JM89...

Observable Response Discrepancy in Flask-AppBuilder

Impact User enumeration in database authentication in Flask-AppBuilder = 3.2.3. Allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when you are logging in. Patches Upgrade to 3.3.0 For more information If you have any questions or commen...

PT-2021-18372 · Pypi · Flask-Appbuilder

Name of the Vulnerable Software and Affected Versions: Flask-AppBuilder versions 3.2.3 and earlier Description: The issue allows a non-authenticated user to enumerate existing accounts by timing the response time from the server when logging in. This is due to user enumeration in database...

Flask-Security has a vulnerability related to input validation errors.

Flask-Security is a software application. Quickly add security features to Flask applications. Flask-Security suffers from an input validation error vulnerability that stems from mishandling user-supplied data, which could allow a remote attacker to redirect a victim to an arbitrary URL...

[ASA-202105-2] python-flask-security-too: cross-site request forgery

Arch Linux Security Advisory ASA-202105-2 ========================================= Severity: High Date : 2021-05-19 CVE-ID : CVE-2021-21241 Package : python-flask-security-too Type : cross-site request forgery Remote : Yes Link : https://security.archlinux.org/AVG-1434 Summary ======= The packag...

Open Redirect

Overview Flask-Security is a Simple security for Flask apps. Affected versions of this package are vulnerable to Open Redirect. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing...

faradaysec (>=3.14.1, <=3.14.4), flask-authoob (>=0.0.21, <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1, <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: SNYK:PYTHON-FLASKSECURITYTOO-1293190...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect. When using the getpostlogoutredirect and getpostloginredirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This...

GHSA-6QMF-FJ6M-686C Open Redirect in Flask-Security-Too

Impact Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes...

flask-authoob (>=0.0.21, <=0.0.34) potentially affected by CVE-2021-32618 via flask-security-too (3.2.0rc1)

flask-security-too PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - flask-authoob =0.0.21, =0.0.34 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

pidb (6.0.1) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0rc3)

flask-security-too PYPI version 3.3.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - pidb 6.0.1 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

task-manager (6.0.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0)

flask-security-too PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager 6.0.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: GHSA-6QMF-FJ6M-686C...

task-manager (>=6.1.0, <=6.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.3)

flask-security-too PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager =6.1.0, =6.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:GHSA-6QMF-FJ6M-686C...

Open Redirect in Flask-Security-Too

Impact Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

UBUNTU-CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

flask-authoob (>=0.0.21, <=0.0.34) potentially affected by CVE-2021-32618 via flask-security-too (3.2.0rc1)

flask-security-too PYPI version 3.2.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - flask-authoob =0.0.21, =0.0.34 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...