flask_appbuilder is vulnerable to Brute Force Attacks. The vulnerability exists due to a lack of rate limiting which allows an attacker to brute force the user credentials and perform unauthorized actions.
flask-limiter.readthedocs.io/en/stable/configuration.html
github.com/advisories/GHSA-9hcr-9hcv-x6pv
github.com/dpgaspar/Flask-AppBuilder/commit/bef24219dab334f5187b04da733c2db8d33ff437
github.com/dpgaspar/Flask-AppBuilder/pull/1976
github.com/dpgaspar/Flask-AppBuilder/releases/tag/v4.3.0
github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-9hcr-9hcv-x6pv