Lucene search
+L

195 matches found

OSV
OSV
•added 2026/10/08 5:52 p.m.•12 views

GHSA-RP9V-7XV3-R6G3 Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor

Summary defer temp.Close sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest exits. Send enough parts and you hit EMFILE. With CRS loaded, that flips MULTIPARTSTRICTERROR to 1 an...

5.3CVSS5.7AI score0.00322EPSS
SaveExploits0References4
Rows per page
Query Builder