2 matches found
MGASA-2025-0282 Updated python-tornado packages fix security vulnerability
Tornado vulnerable to excessive logging caused by malformed multipart form data. CVE-2025-47287...
GHSA-9WJ4-8H85-PGRW OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint
Impact OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrint and through that make the web server component become unresponsive. This could be used to effectively run ...