CVE-2023-30798

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Uncontrolled Resource Consumption pada encode starlette. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service.

Rincian

Terbit di NVD

21 April 2023

Terakhir diubah

15 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x mitigasi · advisory vendor
• https://github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa patch
• https://vulncheck.com/advisories/starlette-multipartparser-dos patch · advisory pihak ketiga