VDB

GCVE-110-MAGEIA-2025-286

GCVE-110-MAGEIA-2025-286
Advisory Published
Vulnetix · Advisory published November 13, 2025
Log Injection Vulnerability in corydolphin/flask-cors. (CVE-2024-1681) Improper Access Control in corydolphin/flask-cors. (CVE-2024-6221) Improper Regex Path Matching in corydolphin/flask-cors. (CVE-2024-6839) Inconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors. (CVE-2024-6844) Case-Insensitive Path Matching in corydolphin/flask-cors. (CVE-2024-6866)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiapython-flask-cors0 (affected), 3.0.10-1.1.mga9 (unaffected)—

Aliases

CVE-2024-1681CVE-2024-6221CVE-2024-6839CVE-2024-6844CVE-2024-6866

References

Updated python-flask-cors packages fix security vulnerabilities
advisory
Updated python-flask-cors packages fix security vulnerabilities
issue
Updated python-flask-cors packages fix security vulnerabilities
advisory

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›