Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-bmjp-tau8-bugq

Summary The Pallets Project Flask before 1.0 is affected by: unexpected memory usage. The impact is: denial of service. The attack vector is: crafted encoded JSON data. The fixed version is: 1. NOTE: this may overlap CVE-2018-1000656.

Aliases

alias	CVE-2019-1010083

alias	GHSA-5wv5-4vpf-pj6m

alias	PYSEC-2019-179

Fixed_packages

url	pkg:deb/debian/flask@1.0.2-1?distro=trixie
purl	pkg:deb/debian/flask@1.0.2-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@1.0.2-1%3Fdistro=trixie

url pkg:deb/debian/flask@1.0.2-3

purl pkg:deb/debian/flask@1.0.2-3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@1.0.2-3

url pkg:deb/debian/flask@1.1.2-2%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/flask@1.1.2-2%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@1.1.2-2%252Bdeb11u1%3Fdistro=trixie

url pkg:deb/debian/flask@2.2.2-3?distro=trixie

purl pkg:deb/debian/flask@2.2.2-3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@2.2.2-3%3Fdistro=trixie

url pkg:deb/debian/flask@3.1.1-1?distro=trixie

purl pkg:deb/debian/flask@3.1.1-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@3.1.1-1%3Fdistro=trixie

url pkg:deb/debian/flask@3.1.2-1?distro=trixie

purl pkg:deb/debian/flask@3.1.2-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@3.1.2-1%3Fdistro=trixie

url	pkg:deb/debian/flask@3.1.3-1?distro=trixie
purl	pkg:deb/debian/flask@3.1.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@3.1.3-1%3Fdistro=trixie

url pkg:pypi/flask@1.0

purl pkg:pypi/flask@1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@1.0

Affected_packages

url pkg:deb/debian/flask@0.6-1

purl pkg:deb/debian/flask@0.6-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.6-1

url pkg:deb/debian/flask@0.8-1

purl pkg:deb/debian/flask@0.8-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.8-1

url pkg:deb/debian/flask@0.10.1-2~bpo70%2B1

purl pkg:deb/debian/flask@0.10.1-2~bpo70%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.10.1-2~bpo70%252B1

url pkg:deb/debian/flask@0.10.1-2

purl pkg:deb/debian/flask@0.10.1-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.10.1-2

url pkg:deb/debian/flask@0.12.1-1~bpo8%2B1

purl pkg:deb/debian/flask@0.12.1-1~bpo8%2B1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.12.1-1~bpo8%252B1

url pkg:deb/debian/flask@0.12.1-1

purl pkg:deb/debian/flask@0.12.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/flask@0.12.1-1

url pkg:pypi/flask@0.1

purl pkg:pypi/flask@0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.1

url pkg:pypi/flask@0.2

purl pkg:pypi/flask@0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.2

url pkg:pypi/flask@0.3

purl pkg:pypi/flask@0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.3

url pkg:pypi/flask@0.3.1

purl pkg:pypi/flask@0.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.3.1

url pkg:pypi/flask@0.4

purl pkg:pypi/flask@0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.4

url pkg:pypi/flask@0.5

purl pkg:pypi/flask@0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.5

url pkg:pypi/flask@0.5.1

purl pkg:pypi/flask@0.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.5.1

url pkg:pypi/flask@0.5.2

purl pkg:pypi/flask@0.5.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.5.2

url pkg:pypi/flask@0.6

purl pkg:pypi/flask@0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-tg74-5nzy-33e5

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.6

url pkg:pypi/flask@0.6.1

purl pkg:pypi/flask@0.6.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.6.1

url pkg:pypi/flask@0.7

purl pkg:pypi/flask@0.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.7

url pkg:pypi/flask@0.7.1

purl pkg:pypi/flask@0.7.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.7.1

url pkg:pypi/flask@0.7.2

purl pkg:pypi/flask@0.7.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.7.2

url pkg:pypi/flask@0.8

purl pkg:pypi/flask@0.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.8

url pkg:pypi/flask@0.8.1

purl pkg:pypi/flask@0.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.8.1

url pkg:pypi/flask@0.9

purl pkg:pypi/flask@0.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.9

url pkg:pypi/flask@0.10

purl pkg:pypi/flask@0.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.10

url pkg:pypi/flask@0.10.1

purl pkg:pypi/flask@0.10.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.10.1

url pkg:pypi/flask@0.11

purl pkg:pypi/flask@0.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.11

url pkg:pypi/flask@0.11.1

purl pkg:pypi/flask@0.11.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.11.1

url pkg:pypi/flask@0.12

purl pkg:pypi/flask@0.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12

url pkg:pypi/flask@0.12.1

purl pkg:pypi/flask@0.12.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12.1

url pkg:pypi/flask@0.12.2

purl pkg:pypi/flask@0.12.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

vulnerability	VCID-y5ke-uj7u-rydk

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12.2

url pkg:pypi/flask@0.12.3

purl pkg:pypi/flask@0.12.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12.3

url pkg:pypi/flask@0.12.4

purl pkg:pypi/flask@0.12.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12.4

url pkg:pypi/flask@0.12.5

purl pkg:pypi/flask@0.12.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6f2e-66xz-t7cu

vulnerability	VCID-bmjp-tau8-bugq

vulnerability	VCID-rx8q-6dwq-a3hs

resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/flask@0.12.5

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010083.json

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1010083.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2019-1010083

reference_id

reference_type

scores

value	0.00399
scoring_system	epss
scoring_elements	0.60659
published_at	2026-04-21T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60673
published_at	2026-04-18T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60667
published_at	2026-04-16T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60625
published_at	2026-04-13T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60645
published_at	2026-04-12T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.6066
published_at	2026-04-11T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60636
published_at	2026-04-09T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.6062
published_at	2026-04-08T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60571
published_at	2026-04-07T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60602
published_at	2026-04-04T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.60574
published_at	2026-04-02T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.605
published_at	2026-04-01T12:55:00Z

value	0.00419
scoring_system	epss
scoring_elements	0.61899
published_at	2026-04-24T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2019-1010083

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010083
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010083

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/advisories/GHSA-5wv5-4vpf-pj6m

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/advisories/GHSA-5wv5-4vpf-pj6m

reference_url

https://github.com/pallets/flask

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pallets/flask

reference_url

https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yaml

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/pypa/advisory-database/tree/main/vulns/flask/PYSEC-2019-179.yaml

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2019-1010083

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2019-1010083

reference_url

https://www.palletsprojects.com/blog/flask-1-0-released

reference_id

reference_type

scores

value	7.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

value	8.7
scoring_system	cvssv4
scoring_elements	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://www.palletsprojects.com/blog/flask-1-0-released

reference_url	https://www.palletsprojects.com/blog/flask-1-0-released/
reference_id
reference_type
scores
url	https://www.palletsprojects.com/blog/flask-1-0-released/

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1888007
reference_id	1888007
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1888007

Weaknesses

cwe_id	400
name	Uncontrolled Resource Consumption
description	The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bmjp-tau8-bugq

Vulnerability Instance