CVE-2025-24023
Last modified
CVE-2025-24023 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dpgaspar | Flask-Appbuilder | < 4.5.3 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-24023?
How severe is CVE-2025-24023?
How do I fix CVE-2025-24023?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-24018YesWiki is a wiki system written in PHP. In versions up to a…5.4
- CVE-2025-24019YesWiki is a wiki system written in PHP. In versions up to a…7.1
- CVE-2025-2402A hard-coded, non-random password for the object store (mini…8.6
- CVE-2025-24020WeGIA is a Web manager for charitable institutions. An Open …6.1
- CVE-2025-24021iTop is an web based IT Service Management tool. Prior to ve…5
- CVE-2025-24022iTop is an web based IT Service Management tool. Prior to ve…8.5
- CVE-2025-24024Mjolnir is a moderation tool for Matrix. Mjolnir v1.9.0 resp…9.1
- CVE-2025-24025Coolify is an open-source and self-hostable tool for managin…6.1
- CVE-2025-24026iTop is an web based IT Service Management tool. Versions pr…5.3
- CVE-2025-24027ps_contactinfo, a PrestaShop module for displaying store con…6.2
- CVE-2025-24028Joplin is a free, open source note taking and to-do applicat…9.6
- CVE-2025-24029Tuleap is an Open Source Suite to improve management of soft…5.3
Are you affected by CVE-2025-24023?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST