CVE-2023-3637
MediumCVSS 4.3Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project, leading to resources that are unconstrained by the user's quota.
Risk Assessment
A malicious user could submit a significant number of requests, potentially leading to a denial of service in the system.
Recommendation
It is recommended to monitor and limit the number of requests from users and implement resource control mechanisms to prevent abuse.
Original NVD description (English source)
An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user to query a list of security groups for an invalid project. This issue creates resources that are unconstrained by the user's quota. If a malicious user were to submit a significant number of requests, this could lead to a denial of service.