View all vulnerabilities

CVE-2023-30798

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
starlette < 8c74c2c8dba7030154f8af18e016136bea1938fa; starlette < 0.25.0
Severity
Ecosystem
Python
Publish Date
April 21, 2023
Modified Date
October 28, 2024