Summary
It was discovered that Werkzeug did not properly handle the parsing of
nameless cookies. A remote attacker could possibly use this issue to
shadow other cookies. (CVE-2023-23934)
It was discovered that Werkzeug could be made to process unlimited number
of multipart form data parts. A remote attacker could possibly use this
issue to cause Werkzeug to consume resources, leading to a denial of
service. (CVE-2023-25577)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | python-werkzeug | 0.14.1+dfsg1-1ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | python-werkzeug | 0.16.1+dfsg1-2ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | python-werkzeug | 2.0.2+dfsg1-1ubuntu0.22.04.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | python-werkzeug | 0.10.4+dfsg1-1ubuntu1.2+esm1 |
Vulnerabilities 2
-
High 7.5
Werkzeug may allow high resource usage when parsing multipart form data with many fields
Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number of parts, including file parts. Parts can be a small amount of bytes, but each requires CPU time to parse an…
-
Low 2.6
Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass
Werkzeug is a comprehensive WSGI web application library. Browsers may allow "nameless" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie l…