Known vulnerabilities in Flask-Security
Vendor:
Flask-Middleware
Software:
Flask-Security
Software CPE:
cpe:2.3:a:flask-middleware:flask-security:*:*:*:*:*:*:*:*
Website:
https://github.com/Flask-Middleware
Total vulnerabilities:
3
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
5.5.0
5.4.3
5.4.2
5.4.1
5.4.0
5.3.3
5.3.2
5.3.1
5.3.0
5.2.0
5.1.2
5.1.1
4.1.6
5.1.0
5.0.2
5.0.1
5.0.0
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.1
4.0.0
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.3.3
3.3.2
3.3.1
3.3.0
3.2.0
3.0.2
3.0.1
3.0.0
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.9
1.6.8
1.6.7
1.6.6
1.6.5
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.4
1.5.3
1.5.2
1.5.1
1.5.0
1.2.3
1.2.2
1.2.1
1.2.0
1.1.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85063 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-49438 |
CWE-601 | Low | 5.3.3 | 08.01.2024 |
SB2024010820 SB2024010830 |
||
| #VU67028 - Cross-Site Request Forgery (CSRF) CVE-2021-21241 |
CWE-352 | Medium | 3.4.5 | 06.09.2022 |
SB2021011123 SB2022090644 SB2021051948 |
||
| #VU59528 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-32618 |
CWE-601 | Medium | - | 12.01.2022 |
SB2021051718 |