MaxHalford/flask-boilerplate

MaxHalford/flask-boilerplate

GitHubGitHub
GitHubgithub.com
Releases0
Stars357
:rocket: Fully fledged Flask boilerplate code
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-43931↗
9.8 CRITICAL—

flask-boilerplate through a170e7c allows account takeover via the password reset feature because SERVER_NAME is not configured and thus a reset depends on the Host HTTP header.