CVE-2024-21644 — pyLoad unauthenticated flask configuration leakage
pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the `SECR…
Published: 2024-01-08 · CVSS: 7.5 · CVSS 3.1
pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the `SECRET_KEY` variable. This issue has been patched in version 0.5.0b3.dev77.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7