VDB
CISA-2024-50311
CISA-2024-50311
PUBLISHED
CVSS 6.5 MEDIUM
Reported by redhat · Published October 22, 2024
A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9, v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 |
Timeline
- Oct 22, 2024 CVE Published
- Nov 20, 2025 CVE Updated
- Apr 26, 2026 Distribution Patch
- Apr 26, 2026 Security Advisory
References
- RHSA-2024:6122 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2319379 issue-trackingx_refsource_REDHAT