CVE-2022-21659

Name of the Vulnerable Software and Affected Versions Flask-AppBuilder versions prior to 3.4.4

Description The issue concerns a user enumeration vulnerability in Flask-AppBuilder, an application development framework built on top of the Flask web framework. This vulnerability allows a non-authenticated user to enumerate existing accounts by timing the response time from the server when logging in.

Recommendations For versions prior to 3.4.4, upgrade to version 3.4.4 as soon as possible. There are no known workarounds for this issue.