Flower Project vulnerabilities
We track 1 vulnerability in Flower Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2022.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Flower Project vulnerabilities
- 8.6 High severity
Flower: Improper Authentication
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down