AIKIDO-2024-10493
python-multipart is vulnerable to Denial of Service (DoS)
75
High Risk
This Affects:
python-multipartTL;DR
Affected versions of this package are vulnerable to Denial of Service (DoS) attacks when processing requests with maliciously crafted input. Specifically, if a request includes junk data after the boundary in a multipart request, the server fails to handle it correctly. This causes resource exhaustion, resulting in the server becoming unresponsive and unable to process further requests.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
python-multipart is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 0.0.17.
How to fix this
Upgrade the python-multipart library to the patch version.
Links
GitHub Release
Get Secure Now
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant