PT-2024-34132
CVE-2024-50311
·
Published
2024-10-22
·
Updated
2024-12-04
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
OpenShift (affected versions not specified)
Description:
A denial of service (DoS) issue was found in OpenShift, related to the GraphQL batching functionality. This allows attackers to send multiple queries within a single request, potentially submitting a request with thousands of aliases in one query. The issue leads to excessive resource consumption, causing application unavailability for legitimate users.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾