296,748
Total vulnerabilities in the database
Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to enable rate limiting using AUTH_RATE_LIMITED = True, RATELIMIT_ENABLED = True, and setting an AUTH_RATE_LIMIT.
| Software | From | Fixed in |
|---|---|---|
Flask-AppBuilder
|
- | 4.3.0 |
| dpgaspar / flask-appbuilder | - | 4.3.0 |