No Rate Limiting on Login AUTH DB

CVE-2023-29005

What is CVE-2023-29005?

Flask-AppBuilder versions prior to 4.3.0 are susceptible to a vulnerability due to the absence of effective rate limiting mechanisms. This flaw permits attackers to execute brute-force attacks against user credentials, compromising the security of user accounts. The vulnerable versions do not include the essential configurations that can mitigate such attacks, specifically the ability to enable rate limiting features. Following the release of version 4.3.0, users can implement mitigation by configuring their application to enable rate limits, protecting against unauthorized access attempts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References