GHSA-2JV5-9R88-3W3P python-multipart vulnerable to Content-Type Header ReDoS

🗓️ 12 Feb 2024 17:28:12Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Python-multipart content-type parsing can cause ReDoS with crafted form headers, consuming processing power and stalling the server.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-24762]	7 Mar 202415:31	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 23.0.2-IF002	2 Apr 202408:09	–	ibm
BDU FSTEC	The vulnerability of the python-multipart streaming multi-component parser lies in the inefficient complexity of regular expressions, allowing attackers to trigger a service failure.	12 Feb 202500:00	–	bdu_fstec
Chainguard	CVE-2024-24762 vulnerabilities	5 Feb 202415:15	–	cgr
Circl	CVE-2024-24762	5 Feb 202416:31	–	circl
CNNVD	python-multipart Resource Management Error Vulnerability	5 Feb 202400:00	–	cnnvd
CVE	CVE-2024-24762	5 Feb 202414:33	–	cve
Cvelist	CVE-2024-24762 python-multipart vulnerable to content-type header Regular expression Denial of Service	5 Feb 202414:33	–	cvelist
Debian CVE	CVE-2024-24762	5 Feb 202414:33	–	debiancve

Source	Link
github	www.github.com/Kludex/python-multipart/security/advisories/GHSA-2jv5-9r88-3w3p
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-24762
github	www.github.com/github/advisory-database/pull/4829
github	www.github.com/Kludex/python-multipart/commit/20f0ef6b4e4caf7d69a667c54dff57fe467109a4
github	www.github.com/encode/starlette/commit/13e5c26a27f4903924624736abd6131b2da80cc5
github	www.github.com/tiangolo/fastapi/commit/9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc
github	www.github.com/Kludex/python-multipart
github	www.github.com/andrew-d/python-multipart/blob/d3d16dae4b061c34fe9d3c9081d9800c49fc1f7a/multipart/multipart.py
github	www.github.com/pypa/advisory-database/tree/main/vulns/fastapi/PYSEC-2024-38.yaml
github	www.github.com/tiangolo/fastapi/releases/tag/0.109.1

07 Jul 2026 17:56Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.01523