Threat Investigation
Request a demo

CVE-2019-1010083

High

Description

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

SeverityHigh
CVSS7.5
Exploit probability—
ProductPalletsprojects Flask
PublishedJul 17, 2019
First seenJul 17, 2019

How to fix

Update
  • palletsprojects flask1.0 or later
  • flask1.0 or later

Affected products

ProductAffected versionsFixed in
palletsprojects flaskv < 1.01.0
flaskPyPIv < 1.01.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.