https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:20:24 +0000 https://cve.radiocsirt.org/vuln/cve-2024-27083 <p><strong>Affected:</strong> dpgaspar Flask-AppBuilder</p> <p>Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user&#39;s browser. This issue was introduced on 4.1.4 and patched on 4.2.1.</p> <p><strong>Affected:</strong> dpgaspar Flask-AppBuilder</p> <p>Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user&#39;s browser. This issue was introduced on 4.1.4 and patched on 4.2.1.</p> https://cve.radiocsirt.org/vuln/cve-2024-27083 https://cve.radiocsirt.org/vuln/ghsa-fqxj-46wg-9v84 <p><strong>Affected:</strong> PyPI: Flask-AppBuilder</p> <p>### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user&#39;s browser.</p> <p>Impacted versions: Flask-AppBuilder version 4.1.4 up to and including 4.2.0</p> <p>### Patches This issue was introduced on 4.1.4 and patched on 4.2.1, user&#39;s should upgrade to 4.2.1 or newer versions.</p> <p><strong>Affected:</strong> PyPI: Flask-AppBuilder</p> <p>### Impact A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user&#39;s browser.</p> <p>Impacted versions: Flask-AppBuilder version 4.1.4 up to and including 4.2.0</p> <p>### Patches This issue was introduced on 4.1.4 and patched on 4.2.1, user&#39;s should upgrade to 4.2.1 or newer versions.</p> https://cve.radiocsirt.org/vuln/ghsa-fqxj-46wg-9v84