Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Davidism

#30368of 53,622
8.7Total CVSS
Vulnerabilities · 1
PT-2018-9508
8.7
2018-08-20
Pallets · Flask · CVE-2018-1000656
**Name of the Vulnerable Software and Affected Versions** Flask versions prior to 0.12.3 **Description** The issue is related to improper input validation, which can result in a large amount of memory usage, possibly leading to denial of service. This can be exploited when an attacker provides JSON data in incorrect encoding. **Recommendations** For versions prior to 0.12.3, update to version 0.12.3 to resolve the issue. As a temporary workaround, consider restricting the handling of JSON data with incorrect encoding to minimize the risk of exploitation.