What is GHSA-2ccw-7px8-vmpf?

GHSA-2ccw-7px8-vmpf is a security advisory published by GitHub Security Advisories with Medium severity. Open Redirect in Flask-AppBuilder

Which CVE IDs does GHSA-2ccw-7px8-vmpf cover?

GHSA-2ccw-7px8-vmpf covers the following CVE IDs: CVE-2022-24776. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2ccw-7px8-vmpf?

GHSA-2ccw-7px8-vmpf has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-2ccw-7px8-vmpf?

GHSA-2ccw-7px8-vmpf affects 1 product, including: pip/Flask-AppBuilder:\u003c 3.4.5.

GHSA-2ccw-7px8-vmpfMediumCVSS 6.1

Open Redirect in Flask-AppBuilder

Vendor

GitHub Security Advisories

Published

March 25, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-24776 →

📋 Description

Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 3.4.5 contain an open redirect vulnerability when using the database authentication login page. There are no known workarounds. Users are recommended to upgrade to version 3.4.5 or later.

For more information

If you have any questions or comments about this advisory:

Open an issue in Flask-AppBuilder

🎯 Affected products1

pip/Flask-AppBuilder:< 3.4.5

🔗 References (6)

https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-2ccw-7px8-vmpf
https://nvd.nist.gov/vuln/detail/CVE-2022-24776
https://github.com/dpgaspar/Flask-AppBuilder/pull/1804
https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v3.4.5
https://github.com/dpgaspar/Flask-AppBuilder/pull/1804/commits/5214d975ebad2ff32057443d2cc20fef1c04d0ea
https://github.com/advisories/GHSA-2ccw-7px8-vmpf