EUVD-2023-0282

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Werkzeug versions before 2.2.3 allow attackers to cause denial of service via multipart data parsing.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Wekzeug is vulnerable to CVE-2023-25577 and CVE-2023-23934 used in IBM Maximo Application Suite - Monitor Component	24 Jul 202317:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	27 Sep 202313:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in werkzeug may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2023-25577, CVE-2023-23934)	28 Jul 202314:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Werkzeug affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)	3 Apr 202313:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Uncontrolled Resource Consumption and Improper Input Validation in Werkzeug (CVE-2023-46136, CVE-2023-25577, CVE-2023-23934)	1 Jul 202518:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Pallets Werkzeug security bypass and denialof service vulnerabilities( CVE-2023-23934, CVE-2023-25577)	6 Jul 202317:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulerabilities in TensorFlow	6 Jul 202317:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "5b778a14-9feb-3bf0-948d-06f90342c90a",
        "vendor": {
          "name": "pallets"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c782c3fb-0bcf-3cd7-9acd-4a22e17a0540",
        "product": {
          "name": "werkzeug"
        },
        "product_version": "< 2.2.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1
github	www.github.com/pallets/werkzeug/releases/tag/2.2.3
github	www.github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-25577
github	www.github.com/pypa/advisory-database/tree/main/vulns/werkzeug/PYSEC-2023-58.yaml
security	www.security.netapp.com/advisory/ntap-20230818-0003
debian	www.debian.org/security/2023/dsa-5470
access	www.access.redhat.com/errata/RHSA-2023:1018
suse	www.suse.com/security/cve/CVE-2023-25577.html
ubuntu	www.ubuntu.com/security/CVE-2023-25577

03 Oct 2025 20:07Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.00366

SSVC

resource exhaustion denial of service multipart data werkzeug vulnerability