194 matches found
Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor
Summary defer temp.Close sits inside a for loop in the multipart processor. Go defers run at function return, not loop end, so every file part in the request holds an open fd until ProcessRequest exits. Send enough parts and you hit EMFILE. With CRS loaded, that flips MULTIPARTSTRICTERROR to 1 an...
5.3CVSS5.7AI score0.00322EPSS
SaveExploits0References4Affected Software1
20