CVE-2024-50311

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50311
A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users.
CVSS

No CVSS.

References
Link Resource
https://access.redhat.com/errata/RHSA-2024:6122
https://access.redhat.com/security/cve/CVE-2024-50311 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2319379 Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
History

25 Feb 2025, 08:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:6122 -
CWE CWE-770

04 Dec 2024, 08:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 6.5 		v2 : unknown
v3 : unknown

30 Oct 2024, 18:39

Type Values Removed Values Added
CPE cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
First Time Redhat openshift Container Platform
Redhat
CWE CWE-400 CWE-770
References () https://bugzilla.redhat.com/show_bug.cgi?id=2319379 - () https://bugzilla.redhat.com/show_bug.cgi?id=2319379 - Issue Tracking
References () https://access.redhat.com/security/cve/CVE-2024-50311 - () https://access.redhat.com/security/cve/CVE-2024-50311 - Vendor Advisory

22 Oct 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-22 14:15

Updated : 2025-02-25 08:15

NVD link : CVE-2024-50311

Mitre link : CVE-2024-50311

JSON object : View

Products Affected

redhat

  • openshift_container_platform
CWE

No CWE.