CVE-2022-24776
Open Redirect in Flask-AppBuilder
6.1
MEDIUM
CVSS 3.1
EPSS 0.92%
描述
Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 3.4.5 contain an open redirect vulnerability when using the database authentication login page. There are no known workarounds. Users are recommended to upgrade to version 3.4.5 or later. ### For more information If you have any questions or comments about this advisory: * Open an issue in [Flask-AppBuilder](https://github.com/dpgaspar/Flask-AppBuilder)
如何修補 CVE-2022-24776
要修補 CVE-2022-24776,請將受影響套件升級到下列已修補版本。
- —升級至 3.4.5 或更新版本
- —升級至 3.4.5 或更新版本
CVE-2022-24776 正在被利用嗎?
低 — EPSS 為 0.9%,目前沒有觀察到大規模利用活動。
受影響套件(2)
- from 0, < 3.4.5
- from 0, < 3.4.5
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |