Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39286
HistoryFeb 16, 2023 - 3:53 a.m.

Denial Of Service (DoS)

2023-02-1603:53:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
starlette
vulnerability
denial of service
multipartparser
application crash
multipart/form-data

0.003 Low

EPSS

Percentile

65.3%

starlette is vulnerable to Denial Of Service (DoS). The vulnerability exists because the library does not properly limit the number of fields and files when parsing multipart/form-data in the MultipartParser function, allowing an attacker to cause an application crash by sending too many small form fields with no content or many empty files.

CPENameOperatorVersion
starlettele0.24.0
starlettele0.24.0

0.003 Low

EPSS

Percentile

65.3%