PVE-2024-72456

Advisory

In affected versions of Flask-Security, a GET request to /login?include_auth_token return…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

-------------- Released January 8, 2021 Security Vulnerability Fix. Two CSRF vul…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/pallets-eco/flask-security/pull/424/commits/2bf7997e94482691ae8c07669eb243d5a9d4d9f5
• https://github.com/pallets-eco/flask-security/pull/424
• https://github.com/pallets-eco/flask-security/issues/421
• https://pypi.org/project/flask-security
• https://data.safetycli.com/changelogs/flask-security/