Vulnerability-Lookup

USN-5948-1 (UBUNTU-CVE-2023-23934)

Vulnerability from osv_ubuntu – Published: 2023-03-13 15:08 – Updated: 2026-06-25 10:46 – Source website

Summary

python-werkzeug vulnerabilities

Details

It was discovered that Werkzeug did not properly handle the parsing of nameless cookies. A remote attacker could possibly use this issue to shadow other cookies. (CVE-2023-23934)

It was discovered that Werkzeug could be made to process unlimited number of multipart form data parts. A remote attacker could possibly use this issue to cause Werkzeug to consume resources, leading to a denial of service. (CVE-2023-25577)

References

URL

Type

	https://ubuntu.com/security/notices/USN-5948-1	ADVISORY
	https://ubuntu.com/security/CVE-2023-23934	REPORT
	https://ubuntu.com/security/CVE-2023-25577	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-23934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-25577",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.10.4+dfsg1-1ubuntu1.2+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.4+dfsg1-1ubuntu1.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10.4+dfsg1-1ubuntu1",
        "0.10.4+dfsg1-1ubuntu1.1",
        "0.10.4+dfsg1-1ubuntu1.2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-23934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-25577",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.14.1+dfsg1-1ubuntu0.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1+dfsg1-1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.12.2+dfsg1-2",
        "0.13+dfsg1-1",
        "0.14.1+dfsg1-1",
        "0.14.1+dfsg1-1ubuntu0.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-23934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-25577",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.16.1+dfsg1-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.16.1+dfsg1-2ubuntu0.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.1+dfsg1-2ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.14.1+dfsg1-4",
        "0.15.6+dfsg1-1",
        "0.16.0+dfsg1-1",
        "0.16.1+dfsg1-1ubuntu1",
        "0.16.1+dfsg1-2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2023-23934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-25577",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "2.0.2+dfsg1-1ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@2.0.2+dfsg1-1ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.2+dfsg1-1ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.1+dfsg1-2",
        "2.0.2+dfsg1-1"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Werkzeug did not properly handle the parsing of\nnameless cookies. A remote attacker could possibly use this issue to\nshadow other cookies. (CVE-2023-23934)\n\nIt was discovered that Werkzeug could be made to process unlimited number\nof multipart form data parts. A remote attacker could possibly use this\nissue to cause Werkzeug to consume resources, leading to a denial of\nservice. (CVE-2023-25577)\n",
  "id": "USN-5948-1",
  "modified": "2026-06-25T10:46:11Z",
  "published": "2023-03-13T15:08:20Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5948-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-23934"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-25577"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "python-werkzeug vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2023-23934",
    "UBUNTU-CVE-2023-25577"
  ]
}

UBUNTU-CVE-2023-23934 (CVE-2023-23934)

Vulnerability from osv_ubuntu – Published: 2023-02-14 20:15 – Updated: 2025-09-08 16:56 – Source website

Details

Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like =value instead of key=value. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like =__Host-test=bad for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie =__Host-test=bad as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.

Severity

3.5 (Low)


                    
                      CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

2.6 (Low)


                    
                      CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-23934	REPORT
	https://github.com/pallets/werkzeug/security/advi…	REPORT
	https://github.com/pallets/werkzeug/commit/cf275f…	REPORT
	https://github.com/pallets/werkzeug/releases/tag/2.2.3	REPORT
	https://ubuntu.com/security/notices/USN-5948-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5948-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-23934	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.10.4+dfsg1-1ubuntu1.2+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.4+dfsg1-1ubuntu1.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10.4+dfsg1-1ubuntu1",
        "0.10.4+dfsg1-1ubuntu1.1",
        "0.10.4+dfsg1-1ubuntu1.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.14.1+dfsg1-1ubuntu0.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1+dfsg1-1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.12.2+dfsg1-2",
        "0.13+dfsg1-1",
        "0.14.1+dfsg1-1",
        "0.14.1+dfsg1-1ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.16.1+dfsg1-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.16.1+dfsg1-2ubuntu0.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.1+dfsg1-2ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.14.1+dfsg1-4",
        "0.15.6+dfsg1-1",
        "0.16.0+dfsg1-1",
        "0.16.1+dfsg1-1ubuntu1",
        "0.16.1+dfsg1-2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "2.0.2+dfsg1-1ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@2.0.2+dfsg1-1ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.2+dfsg1-1ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.1+dfsg1-2",
        "2.0.2+dfsg1-1"
      ]
    }
  ],
  "aliases": [],
  "details": "Werkzeug is a comprehensive WSGI web application library. Browsers may allow \"nameless\" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.",
  "id": "UBUNTU-CVE-2023-23934",
  "modified": "2025-09-08T16:56:08Z",
  "published": "2023-02-14T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-23934"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/security/advisories/GHSA-px8h-6qxv-m22q"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/commit/cf275f42acad1b5950c50ffe8ef58fe62cdce028"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/releases/tag/2.2.3"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5948-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5948-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-23934"
    }
  ],
  "related": [
    "USN-5948-1",
    "USN-5948-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-23934"
  ]
}

UBUNTU-CVE-2023-25577 (CVE-2023-25577)

Vulnerability from osv_ubuntu – Published: 2023-02-14 20:15 – Updated: 2025-09-08 16:56 – Source website

Details

Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses request.data, request.form, request.files, or request.get_data(parse_form_data=False), it can cause unexpectedly high resource usage. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. Unlimited file parts can use up memory and file handles. If many concurrent requests are sent continuously, this can exhaust or kill all available workers. Version 2.2.3 contains a patch for this issue.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2023-25577	REPORT
	https://github.com/pallets/werkzeug/commit/517cac…	REPORT
	https://github.com/pallets/werkzeug/releases/tag/2.2.3	REPORT
	https://github.com/pallets/werkzeug/security/advi…	REPORT
	https://ubuntu.com/security/notices/USN-5948-1	ADVISORY
	https://ubuntu.com/security/notices/USN-5948-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2023-25577	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.10.4+dfsg1-1ubuntu1.2+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.10.4+dfsg1-1ubuntu1.2+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.10.4+dfsg1-1ubuntu1.2+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.10.4+dfsg1-1ubuntu1",
        "0.10.4+dfsg1-1ubuntu1.1",
        "0.10.4+dfsg1-1ubuntu1.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          },
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.14.1+dfsg1-1ubuntu0.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.14.1+dfsg1-1ubuntu0.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.14.1+dfsg1-1ubuntu0.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.12.2+dfsg1-2",
        "0.13+dfsg1-1",
        "0.14.1+dfsg1-1",
        "0.14.1+dfsg1-1ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "0.16.1+dfsg1-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@0.16.1+dfsg1-2ubuntu0.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.16.1+dfsg1-2ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "0.14.1+dfsg1-4",
        "0.15.6+dfsg1-1",
        "0.16.0+dfsg1-1",
        "0.16.1+dfsg1-1ubuntu1",
        "0.16.1+dfsg1-2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "python3-werkzeug",
            "binary_version": "2.0.2+dfsg1-1ubuntu0.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "python-werkzeug",
        "purl": "pkg:deb/ubuntu/python-werkzeug@2.0.2+dfsg1-1ubuntu0.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.2+dfsg1-1ubuntu0.22.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.1+dfsg1-2",
        "2.0.2+dfsg1-1"
      ]
    }
  ],
  "aliases": [],
  "details": "Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug\u0027s multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse and may use more memory as Python data. If a request can be made to an endpoint that accesses `request.data`, `request.form`, `request.files`, or `request.get_data(parse_form_data=False)`, it can cause unexpectedly high resource usage. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. The amount of RAM required can trigger an out of memory kill of the process. Unlimited file parts can use up memory and file handles. If many concurrent requests are sent continuously, this can exhaust or kill all available workers. Version 2.2.3 contains a patch for this issue.",
  "id": "UBUNTU-CVE-2023-25577",
  "modified": "2025-09-08T16:56:09Z",
  "published": "2023-02-14T20:15:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-25577"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/commit/517cac5a804e8c4dc4ed038bb20dacd038e7a9f1"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/releases/tag/2.2.3"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/pallets/werkzeug/security/advisories/GHSA-xg9f-g7g7-2323"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5948-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5948-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2023-25577"
    }
  ],
  "related": [
    "USN-5948-1",
    "USN-5948-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2023-25577"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

USN-5948-1 (UBUNTU-CVE-2023-23934)

UBUNTU-CVE-2023-23934 (CVE-2023-23934)

UBUNTU-CVE-2023-25577 (CVE-2023-25577)

Tags

Sightings

Nomenclature

Related by attack behaviour