| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| quart | < 0.20.0 | 0.20.0 |
| werkzeug | ≥ 2.0.0rc1, < 3.0.6 | 3.0.6 |
| quart | < 0.19.7 | 0.19.7 |
| werkzeug | < 3.0.6 | 3.0.6 |
Applications using Werkzeug to parse multipart/form-data requests are vulnerable to resource exhaustion. A specially crafted form body can bypass the Request.max_form_memory_size setting.
The Request.max_content_length setting, as well as resource limits provided by deployment software and platforms, are also available to limit the resources used during a request. This vulnerability does not affect those settings. All three types of limits should be considered and set appropriately when deploying an application.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン