CVE-2023-33175
30.05.2023, 05:15
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| toui_project | toui | 2.0.1 ≤ 𝑥 ≤ 2.4.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-914 - Improper Control of Dynamically-Identified VariablesThe software does not properly restrict reading from or writing to dynamically-identified variables.
- CWE-913 - Improper Control of Dynamically-Managed Code ResourcesThe software does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.