CVE-2022-24776: Open Redirect in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3.4.5. There are currently no known workarounds.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-24776?
CVE-2022-24776 is an open redirect vulnerability in Flask-AppBuilder versions before 3.4.5.
What is Flask-AppBuilder?
Flask-AppBuilder is an application development framework built on top of the Flask web framework.
How does Flask-AppBuilder get affected by CVE-2022-24776?
Flask-AppBuilder versions before 3.4.5 are affected by the open redirect vulnerability identified as CVE-2022-24776.
What is the severity of CVE-2022-24776?
The severity of CVE-2022-24776 is medium, with a CVSS score of 6.1.
How can I fix the open redirect vulnerability in Flask-AppBuilder?
To fix the open redirect vulnerability, ensure that you are using Flask-AppBuilder version 3.4.5 or later.