GHSA-5wv5-4vpf-pj6m

ghsaUSosv

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

view advisory published 2019-07-19Licence: CC-BY-4.0

The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-1010083US	high7.5	1.83% (79th)	—	2019-07-17
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version i…

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-5wv5-4vpf-pj6mADVISORY
https://github.com/pallets/flaskPACKAGE
https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yamlWEB
https://nvd.nist.gov/vuln/detail/CVE-2019-1010083ADVISORY
https://www.palletsprojects.com/blog/flask-1-0-releasedWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan