Summary
[6.4.2-1.el10_0.1]
- httputil: Raise errors instead of logging in multipart/form-data parsing
Resolves: RHEL-91992
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | python3-tornado | 0:6.4.2-1.el10_0.1 |
Vulnerabilities 1
-
High 7.5
Tornado vulnerable to excessive logging caused by malformed multipart form data
Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate…