Dashboard / CVE-2023-27530

CVE-2023-27530

HIGH
MEDIUM Priority: 0.14 BB Relevance: 75/100
Published: 2023-03-10 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.

Weakness Classification (2)

Affected Software (6)

VendorProductVersion
debian debian_linux 10.0
debian debian_linux 11.0
rack rack < 2.0.9.3
rack rack 2.1.0 – 2.1.4.3
rack rack 2.2.0 – 2.2.6.3
rack rack 3.0.0 – 3.0.4.2

References & Advisories (4)

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.83%
Raw Score 0.018300
Percentile 78.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.01830
2026-10-28
0.01830

Intelligence Sources

nvd ref →

External Links