CVE-2024-25128 - CVE House

Back to Database

Status published Critical CVE-2024-25128

Flask-AppBuilder incorrect authentication when using auth type OpenID

9.1 CVSS

Vulnerability Description

Flask-AppBuilder is an application development framework, built on top of Flask. When Flask-AppBuilder is set to AUTH_TYPE AUTH_OID, it allows an attacker to forge an HTTP request, that could deceive the backend into using any requested OpenID service. This vulnerability could grant an attacker unauthorised privilege access if a custom OpenID service is deployed by the attacker and accessible by the backend. This vulnerability is only exploitable when the application is using the OpenID 2.0 authorization protocol. Upgrade to Flask-AppBuilder 4.3.11 to fix the vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-25128

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from dpgaspar

View All →

Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods

Flask-AppBuilder open redirect vulnerability using HTTP host injection

Observable Response Discrepancy in flask-appbuilder

Flask-AppBuilder login form allows browser to cache sensitive fields

Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS)

Affected Vendor

dpgaspar

View all reports →

Affected Software

Flask-AppBuilder

Vulnerable Versions:

< 4.3.11

Timeline

Official Publish: February 28th, 2024

Last Modified: August 26th, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1078 Valid Accounts

T1556 Modify Authentication Process

Credential Access