Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-50311 EUVD-2024-45178GHSA-gmjx-74cx-5p3f

Graphql: denial of service (dos) vulnerability via graphql batching

Published Oct 22, 2024 · Updated Nov 20, 2025 · Assigned by redhat

Description

A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in one query. This issue causes excessive resource consumption, leading to application unavailability for legitimate users.

Affected products

VendorProductAffectedFixed
Red Hat Red Hat OpenShift Container Platform 4.18 — —

References