CVE-2024-27083

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-27083
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27083.json
Aliases
Published
2024-02-29T01:44:19Z
Modified
2024-03-02T20:21:06.959278Z
Details

Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1.

References

Affected packages

Git / github.com/dpgaspar/Flask-AppBuilder

Affected ranges

Type
GIT
Repo
https://github.com/dpgaspar/Flask-AppBuilder
Events
Introduced
0The exact introduced commit is unknown
Fixed

Affected versions

3.*

3.1.1

v1.*

v1.10.0
v1.11.0
v1.11.1
v1.12.0
v1.12.1
v1.12.2
v1.12.3
v1.12.4
v1.12.5
v1.13.0
v1.8.1
v1.9.0
v1.9.1
v1.9.2
v1.9.3
v1.9.4
v1.9.5
v1.9.6

v2.*

v2.0.0
v2.1.0
v2.1.1
v2.1.10
v2.1.11
v2.1.12
v2.1.13
v2.1.2
v2.1.3
v2.1.4
v2.1.5
v2.1.6
v2.1.7
v2.1.8
v2.1.9
v2.2.0
v2.2.1
v2.2.1rc1
v2.2.2
v2.2.3
v2.3.0
v2.3.1
v2.3.2
v2.3.3
v2.3.4

v3.*

v3.0.0
v3.0.1
v3.1.0
v3.1.1
v3.2.0
v3.2.1
v3.2.2
v3.2.3
v3.3.0
v3.3.1
v3.3.2
v3.3.3
v3.3.4
v3.4.0
v3.4.1
v3.4.2
v3.4.3
v3.4.4
v3.4.5

v4.*

v4.0.0
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.1.6
v4.2.0