Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2024/09/04 6:12 p.m.•17 views

GHSA-FW5R-6M3X-RH7P Flask-AppBuilder's login form allows browser to cache sensitive fields

Impact Auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Patches Upgrade flask-appbuilder to version 4.5.1 Workarounds If upgrading is not possible configure your web server to send the...

4.8CVSS5.9AI score0.00265EPSS
SaveExploits0References4
Mend
Mend
•added 2018/09/24 10:00 p.m.•8 views

CVE-2018-17107

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 fixed in 3.2.5.0, active logins would be cached, allowing subsequent logins to succeed with any username or password...

9.8CVSS0.01645EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/09/24 12:00 a.m.•7 views

CVE-2018-17107: Undefined Security Weakness

In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 fixed in 3.2.5.0, active logins would be cached, allowing subsequent logins to succeed with any username or password...

9.8CVSS8.2AI score0.01645EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/12/18 6:00 a.m.•54 views

CVE-2017-17734

CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in sessions...

9.4AI score0.01086EPSS
SaveExploits0References2
Rows per page
Query Builder