Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66498
HistoryJun 09, 2022 - 12:00 a.m.

Flower Denial of Service Vulnerability

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
flower
web-based
denial-of-service
vulnerability
real-time monitoring
celery
distributed task queue
oauth authentication bypass
exploit
shut down task node
cnvd

EPSS

0.002

Percentile

54.1%

Flower is a web-based tool for real-time monitoring and management of the Celery distributed task queue.A denial-of-service vulnerability exists in Flower version 2 May 2022 and earlier, which stems from vulnerability to OAuth authentication bypass. An attacker could exploit this vulnerability to deny service by shutting down the Celery task node.

EPSS

0.002

Percentile

54.1%