threat
engine
.sh
Back
·
··:··
Home
/
Product
/
dpgaspar flask appbuilder
Product
dpgaspar flask appbuilder
14 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2025-58065
< 4.8.1
Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth
6.5
MEDIUM
CVE-2025-32962
< 4.6.2
Flask-AppBuilder is an application development framework built on top of Flask. Versions prior to 4.6.2 would allow for a maliciou
4.3
MEDIUM
CVE-2025-24023
< 4.5.3
Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumera
3.7
LOW
CVE-2024-45314
< 4.5.1
Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives
3.6
LOW
CVE-2024-27083
>= 4.1.4 and < 4.2.1
Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has be
4.3
MEDIUM
CVE-2024-25128
< 4.3.11
Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OI
9.1
CRITICAL
CVE-2023-34110
< 4.3.2
Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated maliciou
2.7
LOW
CVE-2023-29005
< 4.3.0
Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3
7.5
HIGH
CVE-2022-31177
< 4.1.3
Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an aut
2.7
LOW
CVE-2022-24776
< 3.4.5
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an op
6.1
MEDIUM
CVE-2022-21659
< 3.4.2
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exis
5.3
MEDIUM
CVE-2021-41265
< 3.3.4
Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulne
8.1
HIGH
CVE-2021-32805
< 3.3.2
Flask-AppBuilder is an application development framework, built on top of Flask. In affected versions if using Flask-AppBuilder OA
7.2
HIGH
CVE-2021-29621
<= 3.2.3
Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilde
5.3
MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin