PVE-2024-72455

Advisory

In affected versions of Flask-Security, a GET request to /tf-qrcode returns the QR code w…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

---------------- Released January 18, 2021 Features & Cleanup +++++++++++++++++++ …

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/pallets-eco/flask-security/pull/423/commits/1a17ad16bb7b997846b3626f1168a5f27842b94c
• https://github.com/pallets-eco/flask-security/pull/423
• https://github.com/pallets-eco/flask-security/issues/418
• https://pypi.org/project/flask-security
• https://data.safetycli.com/changelogs/flask-security/