[Snyk:Low] Flask-cors Log Injection LOCUST (Due: 07/23/2024)

[cnlucas]

Introduced through
locust@2.14.2

Exploit maturity
Proof of Concept

Detailed paths

Introduced through: project@0.0.0 › locust@2.14.2 › flask-cors@4.0.0
Fix: No remediation path available. 

Security information
Factors contributing to the scoring:

Snyk: [CVSS 3.1](https://security.snyk.io/vuln/SNYK-PYTHON-FLASKCORS-6670412) - Low Severity
NVD: Not available. NVD has not yet published its analysis.

Why are the scores different? Learn how Snyk evaluates vulnerability scores
Overview

Flask-Cors is an A Flask extension adding a decorator for CORS support

Affected versions of this package are vulnerable to Log Injection when the log level is set to debug. A user can inject or modify messages by abusing CRLF sequences in the request path of a GET request.