Vulnerabilities > CVE-2025-24023 - Response Discrepancy Information Exposure vulnerability in Dpgaspar Flask-Appbuilder
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |