Low severity3.6NVD Advisory· Published Sep 4, 2024· Updated Jun 17, 2026
CVE-2024-45314
CVE-2024-45314
Description
Flask-AppBuilder is an application development framework. Prior to version 4.5.1, the auth DB login form default cache directives allows browser to locally store sensitive data. This can be an issue on environments using shared computer resources. Version 4.5.1 contains a patch for this issue. If upgrading is not possible, configure one's web server to send the specific HTTP headers for /login per the directions provided in the GitHub Security Advisory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
flask-appbuilderPyPI | < 4.5.1 | 4.5.1 |
Affected products
17cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*range: <4.5.1
- (no CPE)range: < 4.5.1
- osv-coords15 versionspkg:apk/chainguard/airflowpkg:apk/chainguard/airflow-bitnami-compatpkg:apk/chainguard/airflow-compatpkg:apk/chainguard/supersetpkg:apk/chainguard/superset-cipkg:apk/chainguard/superset-entrypointpkg:apk/chainguard/superset-iamguarded-compatpkg:apk/wolfi/airflowpkg:apk/wolfi/airflow-bitnami-compatpkg:apk/wolfi/airflow-compatpkg:apk/wolfi/supersetpkg:apk/wolfi/superset-cipkg:apk/wolfi/superset-entrypointpkg:apk/wolfi/superset-iamguarded-compatpkg:pypi/flask-appbuilder
< 2.10.3-r0+ 14 more
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 2.10.3-r0
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.0.2-r5
- (no CPE)range: < 4.5.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.