Vulnerabilities CVE-2023-30798

CVE-2023-30798

High

Open

TLP:CLEAR

MultipartParser DOS with too many fields or files in Starlette Framework

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 1.29%

67.5th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Confidence: 90%
Published: Apr 21, 2023
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.