pyLoad is the free and open-source Download Manager written in pure Python. Any unauthenticated user can browse to a specific URL to expose the Flask config, including the SECRET_KEY variable. This issue has been patched in version 0.5.0b3.dev77.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pyload | Pyload | * | 0.4.9 (including) |
| Pyload | Pyload | 0.5.0-beta1 (including) | 0.5.0-beta1 (including) |
| Pyload | Pyload | 0.5.0-beta2 (including) | 0.5.0-beta2 (including) |