CVE-2025-32962: Flask-AppBuilder Open Redirect Vulnerability via HTTP Host Injection
Summary
CVE-2025-32962: Flask-AppBuilder open redirect vulnerability using HTTP host injection. Affects flask-appbuilder versions < 4.6.2. Fixed in 4.6.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Flask-AppBuilder is a popular framework for building web applications in Python, providing a robust set of tools for creating and managing web applications with ease. It allows developers to create user interfaces, manage databases, and implement authentication. However, prior to version 4.6.2, Flask-AppBuilder was susceptible to an open redirect vulnerability, which could be exploited by malicious actors to redirect users to untrusted domains.
Vulnerability Detail
The vulnerability arises from the improper handling of the Host header in HTTP requests. An unauthenticated attacker could manipulate this header to redirect users to arbitrary external sites, potentially leading to phishing attacks or other malicious activities. This issue is classified under CWE-601, indicating a weakness in the application's ability to validate redirect targets based on the Host header.
How To Fix
Minimum fixed version
4.6.2
This is the first release that contains the fix.
pip install --upgrade "flask-appbuilder==4.6.2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can use a reverse proxy to enforce trusted Host headers, ensuring that only requests with valid headers are processed by your application.
Conclusion
In summary, the open redirect vulnerability in Flask-AppBuilder prior to version 4.6.2 poses a significant risk to web applications. It is crucial for developers to update to the latest version and configure safe redirect hosts to mitigate this issue effectively. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for flask-appbuilder →
FAQ
An open redirect vulnerability allows attackers to redirect users to untrusted or malicious websites, often leading to phishing attacks.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities without requiring installation.
The primary risk is that users may be redirected to malicious sites, which can lead to data theft, credential harvesting, or malware installation.
Yes, you can implement a reverse proxy to enforce trusted Host headers as a temporary workaround until you can update the package.
The CVSS score for this vulnerability is 4.3, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for flask-appbuilder.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
