CVE-2019-1010083: High severity flask by pallets projects vulnerability
Published Jul 17, 2019
·Updated
The Pallets Project Flask before 1.0 is affected by unexpected memory usage. The impact is denial of service. The attack vector is crafted encoded JSON data. The fixed version is 1. NOTE this may overlap CVE-2018-1000656.
Other sources
The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.
Affected Software
2 affected componentsFixes available
pip/flask<1.0
1.0
palletsprojects Flask<1.0
Event History
Jul 17, 2019
CVE Published
via MITRE·01:59 PM
Data Sourced
via MITRE·01:59 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityAffected Software
Jul 19, 2019
Advisory Published
via GitHub·04:12 PM
Data Sourced
via GitHub·04:12 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-1010083.
2
What is the severity of CVE-2019-1010083?
The severity of CVE-2019-1010083 is 7.5 (High).
3
How does CVE-2019-1010083 affect the Pallets Project Flask?
CVE-2019-1010083 affects the Pallets Project Flask before version 1.0.
4
What is the impact of CVE-2019-1010083?
The impact of CVE-2019-1010083 is denial of service.
5
How can I fix CVE-2019-1010083?
To fix CVE-2019-1010083, update Flask to version 1.0 or higher.