Flask-AppBuilder
Dpgaspar · 13 CVEs
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
Sep 11, 2025
Flask-AppBuilder open redirect vulnerability using HTTP host injection
May 16, 2025
Observable Response Discrepancy in flask-appbuilder
Mar 3, 2025
Flask-AppBuilder login form allows browser to cache sensitive fields
Sep 4, 2024
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
Feb 28, 2024
Flask-AppBuilder incorrect authentication when using auth type OpenID
Feb 28, 2024
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Jun 22, 2023
No Rate Limiting on Login AUTH DB
Apr 10, 2023
Possible to infer sensitive information through query strings in Flask-AppBuilder
Aug 1, 2022
Open Redirect in Flask-AppBuilder
Mar 24, 2022
Observable Response Discrepancy in Flask-AppBuilder
Jan 31, 2022
Improper Authentication in Flask-AppBuilder
Dec 9, 2021
URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder
Sep 8, 2021
Observable Response Discrepancy in Flask-AppBuilder
Jun 7, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-58065 | Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods | MEDIUM | 0.41% | Sep 11, 2025 |
| CVE-2025-32962 | Flask-AppBuilder open redirect vulnerability using HTTP host injection | MEDIUM | 0.22% | May 16, 2025 |
| CVE-2025-24023 | Observable Response Discrepancy in flask-appbuilder | MEDIUM | 0.33% | Mar 3, 2025 |
| CVE-2024-45314 | Flask-AppBuilder login form allows browser to cache sensitive fields | MEDIUM | 0.27% | Sep 4, 2024 |
| CVE-2024-27083 | Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) | MEDIUM | 0.57% | Feb 28, 2024 |
| CVE-2024-25128 | Flask-AppBuilder incorrect authentication when using auth type OpenID | CRITICAL | 0.86% | Feb 28, 2024 |
| CVE-2023-34110 | Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error | MEDIUM | 0.68% | Jun 22, 2023 |
| CVE-2023-29005 | No Rate Limiting on Login AUTH DB | HIGH | 0.63% | Apr 10, 2023 |
| CVE-2022-31177 | Possible to infer sensitive information through query strings in Flask-AppBuilder | LOW | 0.74% | Aug 1, 2022 |
| CVE-2022-24776 | Open Redirect in Flask-AppBuilder | MEDIUM | 0.97% | Mar 24, 2022 |
| CVE-2022-21659 | Observable Response Discrepancy in Flask-AppBuilder | MEDIUM | 0.95% | Jan 31, 2022 |
| CVE-2021-41265 | Improper Authentication in Flask-AppBuilder | HIGH | 1.32% | Dec 9, 2021 |
| CVE-2021-32805 | URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder | MEDIUM | 0.70% | Sep 8, 2021 |
| CVE-2021-29621 | Observable Response Discrepancy in Flask-AppBuilder | MEDIUM | 3.40% | Jun 7, 2021 |
Showing 1 to 13 of 13 CVEs