CVE Catalog
CVE-2026-23934
MediumCVSS 5.1Summary
An authenticated user can cause disproportionate CPU load on the Frontend webserver by sending specially crafted requests to the validate.api.exists action, leading to potential denial of service.
Risk Assessment
The attack can overload the frontend server, resulting in unavailability of services for other users.
Recommendation
Restrict access to the validate.api.exists action for authenticated users and apply vendor patches.
Original NVD description (English source)
An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service.