PYSEC-2018-54

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/flask-admin/PYSEC-2018-54.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2018-54

Aliases

CVE-2018-16516
GHSA-894g-6j7q-2hx6

Published

2018-09-05T14:29:00Z

Modified

2023-11-08T04:00:01.239033Z

Summary

[none]

Details

helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.

References

https://github.com/flask-admin/flask-admin/pull/1699
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZU2VKULURVXEU4YFTLMBQGYMPSXQ4MBN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJIYCWIH3BRLI2QNC53CQXLKVP27X7EH/
https://github.com/advisories/GHSA-894g-6j7q-2hx6

Affected packages

PyPI / flask-admin

Package

Name: flask-admin; View open source insights on deps.dev
Purl: pkg:pypi/flask-admin

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3

Affected versions

0.*

0.1

0.1.1

0.1.2

0.1.3

0.1.4

0.2.0

0.2.1

0.2.2

0.3.0

0.4.0

0.4.1

0.4.2

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1.0

1.2.0

1.3.0

1.4.0

1.4.1

1.4.2

1.5.0

1.5.1

1.5.2

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/flask-admin/PYSEC-2018-54.yaml"