flaskBlog is a simple blog app built with Flask. Improper storage and rendering of the `/user/<user>` page allows a user's comments to execute arbitrary javascript code. The html template `user.html` contains the following code snippet to render comments made by a user: `<div class="content" tag="content">{{comment[2]|safe}}</div>`. Use of the "safe" tag causes flask to _not_ escape the rendered content. To remediate this, simply remove the `|safe` tag from the HTML above. No fix is is available and users are advised to manually edit their installation.
References
Link | Resource |
---|---|
https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6 | Exploit Vendor Advisory |
Configurations
History
26 Jan 2024, 18:50
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/DogukanUrker/flaskBlog/security/advisories/GHSA-mrcw-j96f-p6v6 - Exploit, Vendor Advisory | |
CPE | cpe:2.3:a:dogukanurker:flaskblog:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
First Time |
Dogukanurker
Dogukanurker flaskblog |
17 Jan 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-17 21:15
Updated : 2024-02-28 20:54
NVD link : CVE-2024-22414
Mitre link : CVE-2024-22414
CVE.ORG link : CVE-2024-22414
JSON object : View
Products Affected
dogukanurker
- flaskblog
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')