Ddpgaspar

Products

Exploited and recent CVEs

• CVE-2025-58065 Medium 6.5 Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods 0.4%
• CVE-2025-32962 Medium 4.3 Flask-AppBuilder open redirect vulnerability using HTTP host injection 0.2%
• CVE-2025-24023 Low 3.7 Observable Response Discrepancy in flask-appbuilder 0.3%
• CVE-2024-45314 Low 3.6 Flask-AppBuilder login form allows browser to cache sensitive fields 0.3%
• CVE-2024-27083 Medium 4.3 Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) 0.6%
• CVE-2024-25128 Critical 9.1 Flask-AppBuilder incorrect authentication when using auth type OpenID 0.9%
• CVE-2023-34110 Low 2.7 Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error 0.7%
• CVE-2023-29005 High 7.5 No Rate Limiting on Login AUTH DB 0.6%
• CVE-2022-31177 Low 2.7 Possible to infer sensitive information through query strings in Flask-AppBuilder 0.8%
• CVE-2022-24776 Medium 6.1 Open Redirect in Flask-AppBuilder 1.0%
• CVE-2021-41265 High 8.1 Improper Authentication in Flask-AppBuilder 1.3%
• CVE-2021-32805 High 7.2 URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder 0.7%
• CVE-2021-29621 Medium 5.3 Observable Response Discrepancy in Flask-AppBuilder 3.4%