CVE:CVE-2018-1000656
CNNVD:CNNVD-201808-601
Pallets Project Flask是Pallets项目的一款轻量级的WSGI（Web服务器网关接口）应用程序框架。
Pallets Project flask 0.12.3之前版本中存在输入验证漏洞。攻击者可借助JSON数据利用该漏洞造成拒绝服务（大量内存消耗）。
solution:Upgrade palletsprojects flask to a higher version than 0.12.3,and avoid the version (,0.12.3); Upgrade netapp active_iq to a higher version than *; Upgrade netapp hyper_converged_infrastructure to a higher version than *; Upgrade netapp ontap_select_deploy_utility to a higher version than *