Information Disclosure

🗓️ 04 May 2023 03:01:31Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 43 Views

Flask missing 'Vary' cookie header in 'save_session' functio

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: Vulnerability in Flask affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [ CVE-2023-30861]	4 Mar 202509:04	–	ibm
IBM Security Bulletins	Security Bulletin: Session Cookie Exposure via Improper Cache Handling in Flask (≤ v2.3.1, ≤ v2.2.4), affects watsonx.data	8 Apr 202610:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Pallets Flask affects IBM Process Mining . CVE-2023-30861	27 Jun 202310:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Flask and Pallets Werkzeug may affect IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2023-30861, CVE-2023-25577, CVE-2023-23934)	19 Jun 202309:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Apr 202416:48	–	ibm

Vulners

Node

flask flaskRange2.3.0–2.3.1python

flask flaskRange2.0.0rc1–2.2.4python

flask flaskRange0.8–1.1.4python

python-flask python-flaskMatch0.10.1_5.el7_7

python-flask python-flaskMatch0.10.1_5.el7

python-flask python-flaskMatch0.10.1_4.el7ui

python-flask python-flaskMatch0.10.1_5.el7rhgs

python-flask python-flaskMatch0.10.1_4.el7

python-flask python-flaskMatch0.10.1_4.el7sat

python-flask python-flaskMatch2.0.1_2.el9.1

python-flask python-flaskMatch1.0.2_2.el8ost

python-flask python-flaskMatch1.1.1_1.el9ost

python-flask python-flaskMatch1.0.2_7.el8ost.1

Source	Link
github	www.github.com/pallets/flask/releases/tag/2.3.2
github	www.github.com/pallets/flask/releases/tag/2.2.5
github	www.github.com/pallets/flask/commit/afd63b16170b7c047f5758eb910c416511e9c965
github	www.github.com/pallets/flask/commit/70f906c51ce49c485f1d355703e9cc3386b1cc2b
github	www.github.com/advisories/GHSA-m2qf-hxjv-5gpq
github	www.github.com/pallets/flask/security/advisories/GHSA-m2qf-hxjv-5gpq
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00024.html
security	www.security.netapp.com/advisory/ntap-20230818-0006/
debian	www.debian.org/security/2023/dsa-5442

20 Aug 2023 22:52Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00221

SSVC