2 matches found
opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
SummaryAutoinstrumentation out of the box adds the label httpmethod that has unbound cardinality. It leads to the server's potential memory exhaustion when many malicious requests are sent. DetailsHTTP method for requests can be easily set by an attacker to be random and long. PoCSend many reques...
7.5CVSS7AI score0.00685EPSS
SaveExploits0References7Affected Software1
20