Flask-Appbuilder Project Flask-Appbuilder vulnerabilities

1 known vulnerability affecting flask-appbuilder_project/flask-appbuilder.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2023-34110LOWCVSS 2.7fixed in 4.3.22023-06-22

CVE-2023-34110 [LOW] CWE-209 CVE-2023-34110: Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4. Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges, could by adding a special character on the add, edit User forms trigger a database error, this error is surfaced back to this actor on the UI. On certain database engines this error can include