Flask-appbuilder Security Vulnerabilities and Issues — Flask-appbuilder CVE List

Lucene search

DpgasparFlask-appbuilder

3 matches found

CVE•added 2025/03/03 4:15 p.m.•274 views

CVE-2025-24023

Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3.

5.3CVSS4.1AI score0.00048EPSS

CVE•added 2022/01/31 9:15 p.m.•93 views

CVE-2022-21659

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by timing the response time from the server wh...

5.3CVSS5AI score0.00261EPSS

CVE•added 2021/06/07 7:15 p.m.•69 views

CVE-2021-29621

Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilder

5.3CVSS5.2AI score0.0029EPSS