Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

David Lord

#30276de 53,639
8.7CVSS total
Vulnerabilidades · 1
PT-2018-9508
8.7
2018-08-20
Pallets · Flask · CVE-2018-1000656
**Name of the Vulnerable Software and Affected Versions** Flask versions prior to 0.12.3 **Description** The issue is related to improper input validation, which can result in a large amount of memory usage, possibly leading to denial of service. This can be exploited when an attacker provides JSON data in incorrect encoding. **Recommendations** For versions prior to 0.12.3, update to version 0.12.3 to resolve the issue. As a temporary workaround, consider restricting the handling of JSON data with incorrect encoding to minimize the risk of exploitation.