Vulnerabilities > CVE-2021-32805 - Unspecified vulnerability in Flask-Appbuilder Project Flask-Appbuilder

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

flask-appbuilder-project

NVD

Published: 2021-09-08

Updated: 2024-11-21

Summary

Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OAuth, an attacker can share a carefully crafted URL with a trusted domain for an application built with Flask-AppBuilder, this URL can redirect a user to a malicious site. This is an open redirect vulnerability. To resolve this issue upgrade to Flask-AppBuilder 3.2.2 or above. If upgrading is infeasible users may filter HTTP traffic containing `?next={next-site}` where the `next-site` domain is different from the application you are protecting as a workaround.

Vulnerable Configurations

Part	Description	Count
Application	Flask-Appbuilder_Project Flask Appbuilder Project Flask Appbuilder - Flask Appbuilder Project Flask Appbuilder 1.8.1 Flask Appbuilder Project Flask Appbuilder 1.9.0 Flask Appbuilder Project Flask Appbuilder 1.9.1 Flask Appbuilder Project Flask Appbuilder 1.9.2 Flask Appbuilder Project Flask Appbuilder 1.9.3 Flask Appbuilder Project Flask Appbuilder 1.9.4 Flask Appbuilder Project Flask Appbuilder 1.9.5 Flask Appbuilder Project Flask Appbuilder 1.9.6 Flask Appbuilder Project Flask Appbuilder 1.10.0 Flask Appbuilder Project Flask Appbuilder 1.11.0 Flask Appbuilder Project Flask Appbuilder 1.11.1 Flask Appbuilder Project Flask Appbuilder 1.12.0 Flask Appbuilder Project Flask Appbuilder 1.12.1 Flask Appbuilder Project Flask Appbuilder 1.12.2 Flask Appbuilder Project Flask Appbuilder 1.12.3 Flask Appbuilder Project Flask Appbuilder 1.12.4 Flask Appbuilder Project Flask Appbuilder 1.12.5 Flask Appbuilder Project Flask Appbuilder 1.13.0 Flask Appbuilder Project Flask Appbuilder 1.13.1 Flask Appbuilder Project Flask Appbuilder 2.0.0 Flask Appbuilder Project Flask Appbuilder 2.1.0 Flask Appbuilder Project Flask Appbuilder 2.1.1 Flask Appbuilder Project Flask Appbuilder 2.1.2 Flask Appbuilder Project Flask Appbuilder 2.1.3 Flask Appbuilder Project Flask Appbuilder 2.1.4 Flask Appbuilder Project Flask Appbuilder 2.1.5 Flask Appbuilder Project Flask Appbuilder 2.1.6 Flask Appbuilder Project Flask Appbuilder 2.1.7 Flask Appbuilder Project Flask Appbuilder 2.1.8 Flask Appbuilder Project Flask Appbuilder 2.1.9 Flask Appbuilder Project Flask Appbuilder 2.1.10 Flask Appbuilder Project Flask Appbuilder 2.1.11 Flask Appbuilder Project Flask Appbuilder 2.1.12 Flask Appbuilder Project Flask Appbuilder 2.1.13 Flask Appbuilder Project Flask Appbuilder 2.2.0 Flask Appbuilder Project Flask Appbuilder 2.2.1 Flask Appbuilder Project Flask Appbuilder 2.2.2 Flask Appbuilder Project Flask Appbuilder 2.2.3 Flask Appbuilder Project Flask Appbuilder 2.2.4 Flask Appbuilder Project Flask Appbuilder 2.3.0 Flask Appbuilder Project Flask Appbuilder 2.3.1 Flask Appbuilder Project Flask Appbuilder 2.3.2 Flask Appbuilder Project Flask Appbuilder 2.3.3 Flask Appbuilder Project Flask Appbuilder 2.3.4 Flask Appbuilder Project Flask Appbuilder 3.0.0 Flask Appbuilder Project Flask Appbuilder 3.0.1 Flask Appbuilder Project Flask Appbuilder 3.1.0 Flask Appbuilder Project Flask Appbuilder 3.1.1 Flask Appbuilder Project Flask Appbuilder 3.2.0 Flask Appbuilder Project Flask Appbuilder 3.2.1 Flask Appbuilder Project Flask Appbuilder 3.2.2 Flask Appbuilder Project Flask Appbuilder 3.2.3 Flask Appbuilder Project Flask Appbuilder 3.3.0 Flask Appbuilder Project Flask Appbuilder 3.3.1	56

Summary

Vulnerable Configurations

References