Dashboard / CVE-2023-30798

CVE-2023-30798

HIGH
MEDIUM Priority: 0.10 BB Relevance: 75/100
Published: 2023-04-21 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause excessive memory usage resulting in denial of service of the HTTP service.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Encode Starlette 0 < 0.25.0

References & Advisories (3)

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

1.30%
Raw Score 0.012990
Percentile 70.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01299
2026-11-12
0.01299
2026-11-10
0.01299
2026-11-09
0.01299
2026-11-08
0.01299

Intelligence Sources

mitre ref →

External Links