Lucene search

CVE-2023-25577

🗓️ 14 Feb 2023 20:17:15Reported by [email protected]Type

Prior to version 2.2.3, Werkzeug's multipart form data parser allows unlimited parts leading to potential denial of service by sending crafted multipart data to an endpoin

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 107
Tenable Nessus	Amazon Linux 2023 : python3-werkzeug (ALAS2023-2023-125)	21 Mar 202300:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2023-25577	5 Mar 202500:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : python-Werkzeug (SUSE-SU-2023:1775-1)	6 Apr 202300:00	–	nessus
Tenable Nessus	RHEL 7 / 8 : Red Hat OpenStack Platform (python-werkzeug) (RHSA-2023:1281)	28 Apr 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2023:1693-1)	31 Mar 202300:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: python-werkzeug (CVE-2023-25577)	20 Mar 202300:00	–	nessus
Tenable Nessus	SUSE SLES15 / openSUSE 15 Security Update : python-Werkzeug (SUSE-SU-2023:1664-1)	30 Mar 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Python3 PHSA-2025-4.0-0788	26 Apr 202500:00	–	nessus
Tenable Nessus	Fedora 37 : mingw-python-werkzeug (2023-af75e27098)	16 Mar 202300:00	–	nessus
Tenable Nessus	Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Werkzeug vulnerabilities (USN-5948-1)	13 Mar 202300:00	–	nessus

Nvd

Node

palletsprojects werkzeugRange<2.2.3

Source	Link
security	www.security.netapp.com/advisory/ntap-20230818-0003/
github	www.github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1
github	www.github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323
github	www.github.com/pallets/werkzeug/releases/tag/2.2.3
debian	www.debian.org/security/2023/dsa-5470

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Feb 2023 20:15Current

7.4High risk

Vulners AI Score7.4

CVSS37.5

EPSS0.00314

CWE-770