Land #18180, Flask unsign library, related modules

Apache Supserset Priv Esc (CVE-2023-27524) and Flask unsign Library
rapid7 · Sep 12, 2023 · 28c4902 · 28c4902
2 parents 30e66c4 + c1cabdf
commit 28c4902
Show file tree

Hide file tree

Showing 9 changed files with 32,387 additions and 0 deletions.
diff --git a/LICENSE b/LICENSE
@@ -49,6 +49,11 @@ Files: data/webcam/api.js
 Copyright: Copyright 2013 Muaz Khan<@muazkh>.
 License: MIT
 
+Files: data/wordlists/flask_secret_keys.txt
+Source: https://github.com/Paradoxis/Flask-Unsign-Wordlist/blob/v2023.34/flask_unsign_wordlist/wordlists/github.txt
+Copyright: Copyright (c) 2023 Luke Paris (Paradoxis)
+License: MIT
+
 Files: external/source/byakugan/*
 Copyright: Lurene Grenier, 2009
 License: BSD-3-clause