CVE catalog
CVE-2022-30034
UBUNTU-CVE-2022-30034
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.07% · Oct 25, 2026
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | flower | 16.04 | 0.7.0+dfsg-2 | vulnerable |
| Ubuntu | flower | 16.04 | 0.8.3+dfsg-1 | vulnerable |
| Ubuntu | flower | 18.04 | 0.8.3+dfsg-2 | vulnerable |
| Ubuntu | flower | 18.04 | 0.8.3+dfsg-2ubuntu1 | vulnerable |
| Ubuntu | flower | 18.04 | 0.8.3+dfsg-3 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: