CVE-2023-30798 MultipartParser DOS with too many fields or files in Starlette Framework

🗓️ 21 Apr 2023 15:27:47Reported by GoogleType

osv

osv🔗 osv.dev👁 16 Views

MultipartParser in Starlette Python framework allows excessive memory usag

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance may be vulnerable to denial of service due to [CVE-2023-30798]	28 Apr 202311:41	–	ibm
Circl	CVE-2023-30798	21 Apr 202320:38	–	circl
CNNVD	Starlette 资源管理错误漏洞	21 Apr 202300:00	–	cnnvd
CVE	CVE-2023-30798	21 Apr 202315:27	–	cve
Cvelist	CVE-2023-30798 MultipartParser DOS with too many fields or files in Starlette Framework	21 Apr 202315:27	–	cvelist
Debian CVE	CVE-2023-30798	21 Apr 202315:27	–	debiancve
EUVD	EUVD-2023-0244	3 Oct 202520:07	–	euvd
Github Security Blog	Duplicate Advisory: Starlette allows an unauthenticated and remote attacker to specify any number of form fields or files	21 Apr 202318:30	–	github
Github Security Blog	MultipartParser denial of service with too many fields or files	14 Feb 202321:31	–	github

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30798.json
github	www.github.com/encode/starlette/security/advisories/GHSA-74m5-2c7w-9w3x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30798
vulncheck	www.vulncheck.com/advisories/starlette-multipartparser-dos
github	www.github.com/encode/starlette/commit/8c74c2c8dba7030154f8af18e016136bea1938fa
github	www.github.com/encode/starlette
pypi	www.pypi.org/project/starlette/

17 Jul 2026 03:45Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.01288

multipartparser starlette python excessive memory usage denial of service http service