Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This vulnerability could grant an attacker unauthorised privilege access if a custom OpenID service is deployed by the attacker and accessible by the backend. This vulnerability is only exploitable when the application is using the OpenID 2.0 authorization protocol. Upgrade to Flask-AppBuilder 4.3.11 to fix the vulnerability.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is
    set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend
    into using any requested OpenID service. This vulnerability could grant an attacker unauthorised privilege
    access if a custom OpenID service is deployed by the attacker and accessible by the backend. This
    vulnerability is only exploitable when the application is using the OpenID 2.0 authorization protocol.
    Upgrade to Flask-AppBuilder 4.3.11 to fix the vulnerability. (CVE-2024-25128)

ID	Name	Product	Family	Type	Severity
460829	Echo: flask-appbuilder: security update to 4.3.11	Tenable Cloud Security	Echo Local Security Checks	Local	critical
460829	Echo: flask-appbuilder: security update to 4.3.11	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	critical
416069	SCA: security update for Flask-AppBuilder (GHSA-j2pw-vp55-fqqj)	Tenable Cloud Security	SCA Checks	Local	critical
416069	SCA: security update for Flask-AppBuilder (GHSA-j2pw-vp55-fqqj)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2024-25128

critical

Tenable Plugins

critical

critical

critical

critical