ROS-20230428-03

A vulnerability in the WSGI Werkzeug web application library is related to the fact that the application does not properly control the consumption of internal resources when parsing data from a composite form with a large number of fields.
internal resource consumption when parsing data from a composite form with a large number of fields.
Exploitation of the vulnerability could allow an attacker acting remotely to cause resource exhaustion and
and execute a denial of service attack.

A vulnerability in the WSGI Werkzeug web application library is related to insufficient validation of “unnamed” cookies.
cookies. Exploitation of the vulnerability could allow an attacker acting remotely to manipulate the
cookie values for an arbitrary domain.