CVE-2022-31177: Flask-AppBuilder - Inference of Sensitive Information through Query Strings
Summary
CVE-2022-31177: Flask-AppBuilder before v4.1.3 allows inference of sensitive information through query strings. Affects flask-appbuilder versions < 4.1.3. Fixed in 4.1.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Flask-AppBuilder is a Python package available on PyPI that provides a framework for building web applications. It offers a set of reusable components and tools for creating user interfaces and managing database models. Flask-AppBuilder supports various authentication options, including the use of a database for user authentication. This vulnerability affects Flask-AppBuilder versions prior to 4.1.3.
Vulnerability Detail
The vulnerability in Flask-AppBuilder allows an authenticated Admin user to infer sensitive information through query strings. By crafting HTTP requests with partial hashed password strings, an attacker can filter users based on their salted and hashed passwords. Although the response does not include the hashed passwords themselves, an attacker can deduce partial password hashes and their corresponding users. This vulnerability only affects Flask-AppBuilder when using the AUTH_DB database authentication option. The impact of this vulnerability is considered low.
How To Fix
Minimum fixed version
4.1.3
This is the first release that contains the fix.
pip install --upgrade "flask-appbuilder==4.1.3"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
Flask-AppBuilder versions prior to 4.1.3 are vulnerable to an information inference vulnerability through query strings. This vulnerability allows an authenticated Admin user to deduce partial password hashes and their corresponding users. It is recommended to update Flask-AppBuilder to version 4.1.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for flask-appbuilder →
FAQ
Flask-AppBuilder is a Python package that provides a framework for building web applications. It offers reusable components and tools for creating user interfaces and managing database models.
The impact of this vulnerability is considered low. An attacker with authenticated Admin user privileges can infer partial password hashes and their corresponding users through crafted HTTP requests.
Flask-AppBuilder versions prior to 4.1.3 are affected by this vulnerability.
To fix this vulnerability, update Flask-AppBuilder to version 4.1.3 or later by running the command 'pip install --upgrade flask-appbuilder'.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for flask-appbuilder.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
