vulnerability

FreeBSD: VID-f0798a6a-bbdb-11ed-ba99-080027f5fec9 (CVE-2023-27530): rack -- possible DoS vulnerability in multipart MIME parsing

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:N/I:N/A:C)	Mar 6, 2023	Mar 7, 2023	Mar 25, 2026

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Mar 6, 2023

Added

Mar 7, 2023

Modified

Mar 25, 2026

Description

Aaron Patterson reports: The Multipart MIME parsing code in Rack limits the number of file parts, but does not limit the total number of parts that can be uploaded. Carefully crafted requests can abuse this and cause multipart parsing to take longer than expected.

Solutions

freebsd-upgrade-package-rubygem-rackfreebsd-upgrade-package-rubygem-rack22freebsd-upgrade-package-rubygem-rack16

References

CVE-2023-27530
https://attackerkb.com/topics/CVE-2023-27530
CWE-400
CWE-770
EUVD-EUVD-2023-0850
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0850

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today