Vulnerabilities > CVE-2022-21659 - Information Exposure Through Discrepancy vulnerability in Flask-Appbuilder Project Flask-Appbuilder

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

flask-appbuilder-project

CWE-203

NVD

Published: 2022-01-31

Updated: 2022-02-07

Summary

Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when you are logging in. Users are advised to upgrade to version 3.4.4 as soon as possible. There are no known workarounds for this issue.

Vulnerable Configurations

Part	Description	Count
Application	Flask-Appbuilder_Project Flask Appbuilder Project Flask Appbuilder - Flask Appbuilder Project Flask Appbuilder 1.8.1 Flask Appbuilder Project Flask Appbuilder 1.9.0 Flask Appbuilder Project Flask Appbuilder 1.9.1 Flask Appbuilder Project Flask Appbuilder 1.9.2 Flask Appbuilder Project Flask Appbuilder 1.9.3 Flask Appbuilder Project Flask Appbuilder 1.9.4 Flask Appbuilder Project Flask Appbuilder 1.9.5 Flask Appbuilder Project Flask Appbuilder 1.9.6 Flask Appbuilder Project Flask Appbuilder 1.10.0 Flask Appbuilder Project Flask Appbuilder 1.11.0 Flask Appbuilder Project Flask Appbuilder 1.11.1 Flask Appbuilder Project Flask Appbuilder 1.12.0 Flask Appbuilder Project Flask Appbuilder 1.12.1 Flask Appbuilder Project Flask Appbuilder 1.12.2 Flask Appbuilder Project Flask Appbuilder 1.12.3 Flask Appbuilder Project Flask Appbuilder 1.12.4 Flask Appbuilder Project Flask Appbuilder 1.12.5 Flask Appbuilder Project Flask Appbuilder 1.13.0 Flask Appbuilder Project Flask Appbuilder 1.13.1 Flask Appbuilder Project Flask Appbuilder 2.0.0 Flask Appbuilder Project Flask Appbuilder 2.1.0 Flask Appbuilder Project Flask Appbuilder 2.1.1 Flask Appbuilder Project Flask Appbuilder 2.1.2 Flask Appbuilder Project Flask Appbuilder 2.1.3 Flask Appbuilder Project Flask Appbuilder 2.1.4 Flask Appbuilder Project Flask Appbuilder 2.1.5 Flask Appbuilder Project Flask Appbuilder 2.1.6 Flask Appbuilder Project Flask Appbuilder 2.1.7 Flask Appbuilder Project Flask Appbuilder 2.1.8 Flask Appbuilder Project Flask Appbuilder 2.1.9 Flask Appbuilder Project Flask Appbuilder 2.1.10 Flask Appbuilder Project Flask Appbuilder 2.1.11 Flask Appbuilder Project Flask Appbuilder 2.1.12 Flask Appbuilder Project Flask Appbuilder 2.1.13 Flask Appbuilder Project Flask Appbuilder 2.2.0 Flask Appbuilder Project Flask Appbuilder 2.2.1 Flask Appbuilder Project Flask Appbuilder 2.2.2 Flask Appbuilder Project Flask Appbuilder 2.2.3 Flask Appbuilder Project Flask Appbuilder 2.2.4 Flask Appbuilder Project Flask Appbuilder 2.3.0 Flask Appbuilder Project Flask Appbuilder 2.3.1 Flask Appbuilder Project Flask Appbuilder 2.3.2 Flask Appbuilder Project Flask Appbuilder 2.3.3 Flask Appbuilder Project Flask Appbuilder 2.3.4 Flask Appbuilder Project Flask Appbuilder 3.0.0 Flask Appbuilder Project Flask Appbuilder 3.0.1 Flask Appbuilder Project Flask Appbuilder 3.1.0 Flask Appbuilder Project Flask Appbuilder 3.1.1 Flask Appbuilder Project Flask Appbuilder 3.2.0 Flask Appbuilder Project Flask Appbuilder 3.2.1 Flask Appbuilder Project Flask Appbuilder 3.2.2 Flask Appbuilder Project Flask Appbuilder 3.2.3 Flask Appbuilder Project Flask Appbuilder 3.3.0 Flask Appbuilder Project Flask Appbuilder 3.3.1 Flask Appbuilder Project Flask Appbuilder 3.3.2 Flask Appbuilder Project Flask Appbuilder 3.3.3 Flask Appbuilder Project Flask Appbuilder 3.3.4 Flask Appbuilder Project Flask Appbuilder 3.4.0 Flask Appbuilder Project Flask Appbuilder 3.4.1	61

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References