dpgaspar records

13 published records for vendor dpgaspar.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2024-25128No exploit	Flask-AppBuilder incorrect authentication when using auth type OpenIDdpgaspar · flask-appbuilder · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.8%	Feb 28, 2024
35Monitor	CVE-2021-41265No exploit	Improper Authentication in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-287 Auth bypass	High8.8	—	1.3%	Dec 9, 2021
30Monitor	CVE-2023-29005No exploit	No Rate Limiting on Login AUTH DBdpgaspar · flask-appbuilder · CWE-307 Pre-auth	High7.5	—	0.6%	Apr 10, 2023
26Monitor	CVE-2025-58065No exploit	Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methodsdpgaspar · flask-appbuilder · CWE-287 Auth bypass	Medium6.5	—	0.4%	Sep 11, 2025
24Monitor	CVE-2022-24776No exploit	Open Redirect in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.9%	Mar 24, 2022
24Monitor	CVE-2021-32805No exploit	URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.7%	Sep 8, 2021
24Monitor	CVE-2024-27083No exploit	Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)dpgaspar · flask-appbuilder · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Feb 28, 2024
24Monitor	CVE-2025-32962No exploit	Flask-AppBuilder open redirect vulnerability using HTTP host injectiondpgaspar · flask-appbuilder · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.2%	May 16, 2025
22Monitor	CVE-2021-29621No exploit	Observable Response Discrepancy in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-203 Pre-auth	Medium5.3	—	3.4%	Jun 7, 2021
22Monitor	CVE-2024-45314No exploit	Flask-AppBuilder login form allows browser to cache sensitive fieldsdpgaspar · flask-appbuilder · CWE-525	Medium5.5	—	0.2%	Sep 4, 2024
21Monitor	CVE-2022-21659No exploit	Observable Response Discrepancy in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-203 Pre-auth	Medium5.3	—	0.9%	Jan 31, 2022
21Monitor	CVE-2025-24023No exploit	Observable Response Discrepancy in flask-appbuilderdpgaspar · flask-appbuilder · CWE-204 Pre-auth	Medium5.3	—	0.3%	Mar 3, 2025
10Monitor	CVE-2022-31177No exploit	Possible to infer sensitive information through query strings in Flask-AppBuilderdpgaspar · flask-appbuilder · CWE-200 Info leak	Low2.7	—	0.7%	Aug 1, 2022

CVE-2024-25128
36Monitor
Flask-AppBuilder incorrect authentication when using auth type OpenID
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
dpgaspar · flask-appbuilderFeb 28, 2024
CVE-2021-41265
35Monitor
Improper Authentication in Flask-AppBuilder
HighCVSS 8.8No exploitEPSS 1%
- Auth bypass
dpgaspar · flask-appbuilderDec 9, 2021
CVE-2023-29005
30Monitor
No Rate Limiting on Login AUTH DB
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
dpgaspar · flask-appbuilderApr 10, 2023
CVE-2025-58065
26Monitor
Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods
MediumCVSS 6.5No exploitEPSS 0%
- Auth bypass
dpgaspar · flask-appbuilderSep 11, 2025
CVE-2022-24776
24Monitor
Open Redirect in Flask-AppBuilder
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
dpgaspar · flask-appbuilderMar 24, 2022
CVE-2021-32805
24Monitor
URL Redirection to Untrusted Site ('Open Redirect') in Flask-AppBuilder
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
dpgaspar · flask-appbuilderSep 8, 2021
CVE-2024-27083
24Monitor
Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
dpgaspar · flask-appbuilderFeb 28, 2024
CVE-2025-32962
24Monitor
Flask-AppBuilder open redirect vulnerability using HTTP host injection
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- Open redirect
dpgaspar · flask-appbuilderMay 16, 2025
CVE-2021-29621
22Monitor
Observable Response Discrepancy in Flask-AppBuilder
MediumCVSS 5.3No exploitEPSS 3%
- Pre-auth
dpgaspar · flask-appbuilderJun 7, 2021
CVE-2024-45314
22Monitor
Flask-AppBuilder login form allows browser to cache sensitive fields
MediumCVSS 5.5No exploitEPSS 0%
dpgaspar · flask-appbuilderSep 4, 2024
CVE-2022-21659
21Monitor
Observable Response Discrepancy in Flask-AppBuilder
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
dpgaspar · flask-appbuilderJan 31, 2022
CVE-2025-24023
21Monitor
Observable Response Discrepancy in flask-appbuilder
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
dpgaspar · flask-appbuilderMar 3, 2025
CVE-2022-31177
10Monitor
Possible to infer sensitive information through query strings in Flask-AppBuilder
LowCVSS 2.7No exploitEPSS 0%
- Info leak
dpgaspar · flask-appbuilderAug 1, 2022