Description (CNA)
The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Grafana / Grafana | affected v12.1.0 before v12.1.10; affected v12.2.0 before v12.2.8; affected v12.3.0 before v12.3.6; affected v12.4.0 before v12.4.2 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
A flaw was found in Grafana. A remote attacker can exploit the feature toggle evaluation endpoint by sending unbounded values, causing the system to read excessive data into memory. This can lead to out-of-memory crashes, resulting in a Denial of Service (DoS) for the affected service.