ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use Website.user_vars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
Weakness
The product does not properly restrict reading from or writing to dynamically-identified variables.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Toui | Toui_project | 2.0.1 (including) | 2.4.0 (including) |