GHSA-f897-875p-23x7
Hard coded credentials in FreeTAKServer
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | FreeTAKServer | < 1.9.8.5 | 1.9.8.5 |
Details
As written in the advisory (Markdown source, shown as plain text).
FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.
References
External links from the advisory. They lead to third-party sites.