Skip to content

Product

debian/flask-security vulnerabilities

3 published CVES affecting debian/flask-security, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
1
Low
0
Unscored
1
CISA KEV
0

Latest debian/flask-security CVEs

Newest publication first

  2. CVE-2021-23385 Open Redirect

    Published
    MediumCVSS 6.1 EPSS 1.2%

    This affects all versions of package Flask-Security. When using the get_post_logout_redirect and get_post_login_redirect functions, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing multiple back slashes such as \\evil.com/path. This vul...

  3. CVE-2021-21241 CSRF can expose users authentication token in Flask-Security-Too

    Published
    HighCVSS 7.4 EPSS 0.93%

    The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and before version 3.4.5...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.