CVE-2023-27530

2023-03-1000:00:00

CWE-400

hackerone

www.cve.org

dos

vulnerability

rack

multipart

mime

parsing

attacker

requests

abuse

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.9%

JSON

A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "https://github.com/rack/rack",
    "versions": [
      {
        "version": "3.0.4.2, 2.2.6.3, 2.1.4.3, 2.0.9.3",
        "status": "affected"
      }
    ]
  }
]