CVE-2024-23820

creationtimestamp| type| source ---|---|--- 2024-01-26 18:21:48+00:00| seen| https://t.me/ctinow/174391 2024-01-28 12:19:17+00:00| seen| https://t.me/arpsyndicate/3286 2024-02-19 20:26:38+00:00| seen| https://t.me/ctinow/187903...

CVE-2024-23820

OpenFGA, an authorization/permission engine, is vulnerable to a denial of service attack in versions prior to 1.4.3. In some scenarios that depend on the model and tuples used, a call to ListObjects may not release memory properly. So when a sufficiently high number of those calls are executed, t...

CVE-2024-23820

CVE-2024-23820 affects OpenFGA (authorization engine). A DoS can occur when repeatedly calling ListObjects, in scenarios depending on the model and tuples, due to memory not being released, potentially exhausting memory and terminating the server. A patch is available in OpenFGA v1.4.3. Other con...