CyberSecBulletin

Dpgaspar vulnerabilities

We track 2 vulnerabilities in Dpgaspar products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 29, 2024.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Dpgaspar vulnerabilities

  • 9.1 Critical severity

    Flask-AppBuilder: Improper Authentication

    CVE-2024-25128Dpgaspar

    Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This vu

  • 7.5 High severity

    Flask-AppBuilder: Improper Restriction of Excessive Authentication Attempts

    CVE-2023-29005Dpgaspar

    Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to enable rate limiting using `AUTH_RATE_LIMITED = True`, `RATELIMIT_ENABLED = True`, and setting an `AUTH