CVE-2024-22414

flaskBlog is a simple blog app built with Flask. Improper storage and rendering of the `/user/<user>` page allows a user's comments to execute arbitrary javascript code. The html template `user.html` contains the following code snippet to render comments made by a user: `<div class="content" tag="content">{{comment[2]|safe}}</div>`. Use of the "safe" tag causes flask to _not_ escape the rendered content. To remediate this, simply remove the `|safe` tag from the HTML above. No fix is is available and users are advised to manually edit their installation.
Configurations

Configuration 1 (hide)

cpe:2.3:a:dogukanurker:flaskblog:*:*:*:*:*:*:*:*

History

26 Jan 2024, 18:50

Type Values Removed Values Added
References () https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6 - () https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6 - Exploit, Vendor Advisory
CPE cpe:2.3:a:dogukanurker:flaskblog:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.4
First Time Dogukanurker
Dogukanurker flaskblog

17 Jan 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-17 21:15

Updated : 2024-02-28 20:54


NVD link : CVE-2024-22414

Mitre link : CVE-2024-22414

CVE.ORG link : CVE-2024-22414


JSON object : View

Products Affected

dogukanurker

  • flaskblog
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')