| Package | Affected versions | Patched versions |
|---|---|---|
| flask-appbuilder | < 3.3.4 | 3.3.4 |
| flask-appbuilder | < 3.3.4 | 3.3.4 |
Improper authentication on the REST API. Allows for a malicious actor with a carefully crafted request to successfully authenticate and gain access to existing protected REST API endpoints. Only affects non database authentication types, and new REST API endpoints.
Upgrade to Flask-AppBuilder 3.3.4
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free