CVE-2019-1010083

2019-07-1713:59:09

dwf

www.cve.org

7.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

JSON

The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

CNA Affected

[
  {
    "product": "Flask",
    "vendor": "The Pallets Project",
    "versions": [
      {
        "status": "affected",
        "version": "≤ 1.0 [fixed: 1]"
      }
    ]
  }
]