Ubuntu 22.04 LTS: 6111-1 Moderate: Flask Exposes Sensitive Data

ubuntu

May 29, 2023

Flask could be made to expose sensitive information in certain scenarios.

Summary

Flask could be made to expose sensitive information in certain scenarios.

Software Description:

- flask: Micro web framework based on Werkzeug and Jinja2

Details:

It was discovered that Flask incorrectly handled certain data responses.

An attacker could possibly use this issue to expose sensitive information.

Topics Covered

security advisory moderate data breach ubuntu sensitive information flask issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.04:
  python3-flask                   2.2.2-2ubuntu1.1

Ubuntu 22.10:
  python3-flask                   2.0.3-1ubuntu1.1

Ubuntu 22.04 LTS:
  python3-flask                   2.0.1-2ubuntu1.1

Ubuntu 20.04 LTS:
  python3-flask                   1.1.1-2ubuntu0.1

In general, a standard system update will make all the necessary changes.