Description
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
Scores
CVSS v3
9.1
EPSS
0.0060
EPSS Percentile
69.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-914
CWE-913
Status
published
Products (2)
pypi/toui
2.0.1 - 2.4.1PyPI
toui_project/toui
2.0.1 - 2.4.0
Published
May 30, 2023
Tracked Since
Feb 18, 2026