Flower vulnerabilities

1 known vulnerability in Flower from Flower Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Flower: Improper Authentication

  CVE-2022-30034Jun 2, 2022Flower ProjectEPSS 1.1%

  Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down