Lucene search

K
redhatRedHatRHSA-2024:0189
HistoryJan 16, 2024 - 2:14 p.m.

(RHSA-2024:0189) Moderate: Red Hat OpenStack Platform 17.1 (python-werkzeug) security update

2024-01-1614:14:07
access.redhat.com
10
werkzeug wsgi utility module
debugger
http utilities
cve-2023-46136
denial of service
unicode aware
bulletin boards

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

Werkzeug is a WSGI utility module. It includes a debugger, request and response objects, HTTP utilities to handle entity tags, cache control headers, HTTP dates, cookie handling, file uploads, a URL routing system and a numerous community contributed add-on modules.

Werkzeug is unicode aware and does not enforce a specific template engine, database adapter or a specific way of handling requests. It is useful for end user applications, such as blogs, wikis, and bulletin boards, that need to operate in a wide variety of server environments.

Security Fix(es):

  • high resource consumption leading to denial of service (CVE-2023-46136)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchpython3-werkzeug< 2.0.1-8.el8ostpython3-werkzeug-2.0.1-8.el8ost.noarch.rpm