GHSA-r3jh-qhgj-gvr8MediumCVSS 6.5

Denial of service in neutron

Published
July 25, 2023
Last Modified
November 10, 2023

🔗 CVE IDs covered (1)

📋 Description

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.

🎯 Affected products1

  • pip/neutron:<= 22.0.2

🔗 References (5)