Lucene search
PRIOn knowledge basePRION:CVE-2023-50709HistoryDec 13, 2023 - 10:15 p.m.
Design/Logic Flaw
2023-12-1322:15:00
PRIOn knowledge base
www.prio-n.com
3
semantic layer
data applications
api endpoint
service disruption
upgrade
Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. The issue has been patched in v0.34.34 and it’s recommended that all users exposing Cube APIs to the public internet upgrade to the latest version to prevent service disruption.
There are currently no workaround for older versions, and the recommendation is to upgrade.
Related
nvd
nvd
CVE-2023-50709
2023-12-13 22:15:43
cvelist
cvelist
CVE-2023-50709 Denial of service attack on the cube-api endpoint
2023-12-13 22:00:04
cve
cve
CVE-2023-50709
2023-12-13 22:15:43
osv
osv
Cube API denial of service attack
2023-12-13 23:15:56
github
github
Cube API denial of service attack
2023-12-13 23:15:56
veracode
veracode
Denial Of Service (DoS)
2023-12-15 08:07:44