CVE-2023-45290

CVE-2023-45290 is a memory exhaustion vulnerability in Go's multipart form parsing functionality, affecting applications that process multipart forms. It allows an attacker to craft input with excessively long lines, causing the application to allocate arbitrarily large amounts of memory and potentially leading to a denial of service. With a CVSS score of 6.5 (Medium), it can be exploited remotely with low complexity and no user interaction, resulting in high availability impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.