pidb (6.0.1) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0rc3)

flask-security-too PYPI version 3.3.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - pidb 6.0.1 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

task-manager (6.0.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.0)

flask-security-too PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager 6.0.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

task-manager (>=6.1.0, <=6.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.3.3)

flask-security-too PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - task-manager =6.1.0, =6.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2021-32618 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

flexmeasures (>=0.3.1, <=0.7.1), pidb (6.1.2) +1 more potentially affected by CVE-2021-32618 via flask-security-too (>=4.0.0, <=4.0.1)

flask-security-too PYPI version =4.0.0, =0.3.1, =0.7.1 - pidb 6.1.2 - task-manager 6.4.0 Source cves: CVE-2021-32618 Source advisory: OSV:PYSEC-2021-123...

Cross site scripting

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PYSEC-2021-123

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

faradaysec (>=3.14.1, <=3.14.4), flask-authoob (>=0.0.21, <=0.0.34) +4 more potentially affected by CVE-2021-32618 via flask-security-too (>=3.2.0rc1, <=4.0.1)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =6.0.0, =6.4.0 Source cves: CVE-2021-32618 Source advisory: MEND:CVE-2021-32618...

CVE-2021-32618

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

CVE-2021-32618

CVE-2021-32618 – Open Redirect in Flask-Security-Too . The Flask extension Flask-Security-Too contains logic to validate the URL in the next parameter, attempting to allow only relative URLs or URLs with the same netloc. However, some browsers may transform incomplete URLs (for example next=\gith...

CVE-2021-32618 Open Redirect Vulnerability

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

PT-2021-19810

Name of the Vulnerable Software and Affected Versions Flask-Security-Too versions 3.0.0 and later Description The issue allows redirects after successful views, such as /login, by honoring the ?next query param. The validation check utilizes Python's urlsplit library to ensure the URL specified i...

CVE-2021-32618: URL Redirection to Untrusted Site

The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views e....

Open Redirect in Flask-Security-Too

Flask-Security allows redirects after many successful views e.g. /login by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc network location as the requesting URL. This check utilizes Pythons...

Flask-Security: Input validation vulnerability

flask-security is a software application. Quickly add security features to Flask applications. Flask-Security-Too An input validation error vulnerability exists where an attacker could use a legitimate site to send such a link to an unsuspecting user, who could then be redirected to any site they...

Open Redirect

Overview Flask-Unchained is a The quickest and easiest way to build large web apps and APIs with Flask and SQLAlchemy Affected versions of this package are vulnerable to Open Redirect. When using the the validateredirecturl function, it is possible to bypass URL validation and redirect a user to ...

CVE-2021-33026

The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage e.g., filesystem, Memcached, Redis, etc., they can construct a crafted payload, poison the...