Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30709
HistoryMay 28, 2021 - 4:20 a.m.

User Enumeration

2021-05-2804:20:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.007 Low

EPSS

Percentile

80.8%

flask_appbuilder is vulnerable to user enumeration. A remote unauthenticated attacker is able to enumerate existing accounts by observing the response time from the server.

CPENameOperatorVersion
flask-appbuilderle3.3.0rc1

0.007 Low

EPSS

Percentile

80.8%