Beveiligingsadvies

CVE-2024-27083

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-28 15:34:02

Laatst bijgewerkt 2024-08-08 19:24:18

Toegewezen door GitHub_M

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1.

← Alle CVE's bekijken Bekijk op cve.org ↗