{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-27T00:29:38.584","vulnerabilities":[{"cve":{"id":"CVE-2024-27083","sourceIdentifier":"security-advisories@github.com","published":"2024-02-29T01:44:19.387","lastModified":"2026-06-17T07:19:07.920","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Flask-AppBuilder is an application development framework, built on top of Flask. A Cross-Site Scripting (XSS) vulnerability has been discovered on the OAuth login page. An attacker could trick a user to follow a specially crafted URL to the OAuth login page. This URL could inject and execute malicious javascript code that would get executed on the user's browser. This issue was introduced on 4.1.4 and patched on 4.2.1.\n"},{"lang":"es","value":"Flask-AppBuilder es un framework de desarrollo de aplicaciones, construido sobre Flask. Se ha descubierto una vulnerabilidad de Cross-Site Scripting (XSS) en la página de inicio de sesión de OAuth. Un atacante podría engañar a un usuario para que siga una URL especialmente manipulada hasta la página de inicio de sesión de OAuth. Esta URL podría inyectar y ejecutar código javascript malicioso que se ejecutaría en el navegador del usuario. Este problema se introdujo en 4.1.4 y se corrigió en 4.2.1."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"dpgaspar","product":"Flask-AppBuilder","versions":[{"version":">= 4.1.4, < 4.2.1","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"dpgaspar","product":"flask-appbuilder","defaultStatus":"unknown","cpes":["cpe:2.3:a:dpgaspar:flask-appbuilder:4.1.4:*:*:*:*:*:*:*"],"versions":[{"version":"4.1.4","lessThan":"4.2.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","baseScore":6.1,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-01T18:44:02.324109Z","id":"CVE-2024-27083","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dpgaspar:flask-appbuilder:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.4","versionEndExcluding":"4.2.1","matchCriteriaId":"E800F4E3-03EE-47CF-AFA1-C6FFC8164831"}]}]}],"references":[{"url":"https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/dpgaspar/Flask-AppBuilder/commit/3d17741886e4b3c384d0570de69689e4117aa812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-fqxj-46wg-9v84","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}