Vulnerability Database
Blog
FAQ
Docs
PYSEC-2018-54
See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/flask-admin/PYSEC-2018-54.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2018-54
Aliases
CVE-2018-16516
GHSA-894g-6j7q-2hx6
Published
2018-09-05T14:29:00Z
Modified
2023-11-08T04:00:01.239033Z
Summary
[none]
Details
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
References
https://github.com/flask-admin/flask-admin/pull/1699
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZU2VKULURVXEU4YFTLMBQGYMPSXQ4MBN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH/
https://github.com/advisories/GHSA-894g-6j7q-2hx6
Affected packages
PyPI
/
flask-admin
Package
Name
flask-admin
View open source insights on deps.dev
Purl
pkg:pypi/flask-admin
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1.5.3
Affected versions
0.*
0.1
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.1
0.2.2
0.3.0
0.4.0
0.4.1
0.4.2
1.*
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9
1.1.0
1.2.0
1.3.0
1.4.0
1.4.1
1.4.2
1.5.0
1.5.1
1.5.2
PYSEC-2018-54 - OSV