Flask-AppBuilder is a development framework, built on top of Flask. User enumeration in database authentication in Flask-AppBuilder <= 3.2.3. Allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when you are logging in. Upgrade to version 3.3.0 or higher to resolve.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2021-06-07T19:00:12

Updated: 2024-08-03T22:11:06.246Z

Reserved: 2021-03-30T00:00:00

Link: CVE-2021-29621

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-06-07T19:15:07.600

Modified: 2023-11-07T03:32:41.127

Link: CVE-2021-29621

cve-icon Redhat

No data.