Flask < 0.12.3 Denial of Service Vulnerability

Latest response

Security center is tagging use of python-flask-0.10.1-4.el7sat.noarch with plugin #119778 as prior to fixed version 0.12.3. The CVE assigned to this is CVE-2018-1000656 however, the current Red Hat RHSA to CVE mapping does not contain a reference for this CVE…plainly, an RHSA does not appear to be issued by Red Hat. Interestingly, the Red Hat CVE database acknowledges the CVE is applicable to RHEL7 here (and or affected host is indeed RHEL7

Responses