VDB
CVE-2023-49438
CVE-2023-49438
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Open redirect vulnerability in Flask-Security-Too
EPSS 1.08% · 61.9th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
1.08%
61.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | Flask-Security-Too | 0, 0, 0 |
| n/a | n/a | n/a, n/a |
| flask-security-too_project | flask-security-too | 0, 0, 0 |
Timeline
- Dec 22, 2023 PoC Published
- Dec 26, 2023 CVE Published
- Dec 26, 2023 PoC Published
- Dec 27, 2023 EPSS Score
- Jan 4, 2024 PoC Published
- Jan 25, 2024 EPSS Score
- Mar 22, 2024 EPSS Score
- Apr 20, 2024 EPSS Score
- Jun 17, 2024 EPSS Score
- Jul 16, 2024 EPSS Score
- Aug 13, 2024 EPSS Score
- Sep 20, 2024 CVE Updated
References
- FEDORA-2024-f34963bef8 vendor-advisory
- https://github.com/Flask-Middleware/flask-security url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HCYH377TPUMUHELPI36PDS2ZM4VFIXM/ url
- https://nvd.nist.gov/vuln/detail/CVE-2023-49438 advisory
- https://github.com/brandon-t-elliott/CVE-2023-49438 exploit
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HCYH377TPUMUHELPI36PDS2ZM4VFIXM url
- https://github.com/Flask-Middleware/flask-security/commit/8b5abc4d4db9926a3d76b34b8b03255effb5e712 url
- https://github.com/pypa/advisory-database/tree/main/vulns/flask-security-too/PYSEC-2023-248.yaml url